CWE-704 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-704/ Sun, 26 Feb 2023 06:51:53 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-704 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-704/ 32 32 CVE-2018-9936 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9936/ Sun, 26 Feb 2023 06:51:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9936/ This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of field elements. The issue results from the lack of […]

The post CVE-2018-9936 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of field elements. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5370.

The post CVE-2018-9936 appeared first on CVE Vulnerability.

]]> CVE-2018-9937 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9937/ Sun, 26 Feb 2023 06:51:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9937/ This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of subform elements. The issue results from the lack of […]

The post CVE-2018-9937 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of subform elements. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5371.

The post CVE-2018-9937 appeared first on CVE Vulnerability.

]]> CVE-2018-9938 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9938/ Sun, 26 Feb 2023 06:51:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9938/ This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the absPageSpan method. The issue results from the lack […]

The post CVE-2018-9938 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the absPageSpan method. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5372.

The post CVE-2018-9938 appeared first on CVE Vulnerability.

]]> CVE-2018-9939 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9939/ Sun, 26 Feb 2023 06:51:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9939/ This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of layout elements. The issue results from the lack of […]

The post CVE-2018-9939 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of layout elements. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5373.

The post CVE-2018-9939 appeared first on CVE Vulnerability.

]]> CVE-2018-9940 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9940/ Sun, 26 Feb 2023 06:51:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9940/ This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the layout sheet attribute. The issue results from the […]

The post CVE-2018-9940 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the layout sheet attribute. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5374.

The post CVE-2018-9940 appeared first on CVE Vulnerability.

]]> CVE-2018-9941 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9941/ Sun, 26 Feb 2023 06:51:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9941/ This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the record append method. The issue results from the […]

The post CVE-2018-9941 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the record append method. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5375.

The post CVE-2018-9941 appeared first on CVE Vulnerability.

]]> CVE-2018-9942 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9942/ Sun, 26 Feb 2023 06:51:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9942/ This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the record remove method. The issue results from the […]

The post CVE-2018-9942 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the record remove method. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5376.

The post CVE-2018-9942 appeared first on CVE Vulnerability.

]]> CVE-2018-9943 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9943/ Sun, 26 Feb 2023 06:51:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9943/ This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the openList method. The issue results from the lack […]

The post CVE-2018-9943 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the openList method. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5377.

The post CVE-2018-9943 appeared first on CVE Vulnerability.

]]> CVE-2018-9568 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9568/ Sun, 26 Feb 2023 06:51:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9568/ In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-113509306. References: Upstream kernel.

The post CVE-2018-9568 appeared first on CVE Vulnerability.

]]> In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-113509306. References: Upstream kernel.

The post CVE-2018-9568 appeared first on CVE Vulnerability.

]]> CVE-2018-9490 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9490/ Sun, 26 Feb 2023 06:51:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9490/ In CollectValuesOrEntriesImpl of elements.cc, there is possible remote code execution due to type confusion. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111274046

The post CVE-2018-9490 appeared first on CVE Vulnerability.

]]> In CollectValuesOrEntriesImpl of elements.cc, there is possible remote code execution due to type confusion. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111274046

The post CVE-2018-9490 appeared first on CVE Vulnerability.

]]>