CVE-2018-19390 - FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (Break instruction exception and application crash) via TIFF data because of a ConvertToPDF_x86!ConnectedPDF::ConnectedPDFSDK::FCP_SendEmailNotification issue

Back Back to CVE browser

MEDIUM

FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (Break instruction exception and application crash) via TIFF data because of a ConvertToPDF_x86!ConnectedPDF::ConnectedPDFSDK::FCP_SendEmailNotification issue

Published Nov 20, 2018

5.5

MEDIUM

CVSS 3.0

EPSS 2.17%

Description

FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (Break instruction exception and application crash) via TIFF data because of a ConvertToPDF_x86!ConnectedPDF::ConnectedPDFSDK::FCP_SendEmailNotification issue.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (3)

https://exchange.xforce.ibmcloud.com/vulnerabilities/153216
Third Party Advisory
https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/20/2018/11/2018-11-20/index.html
x_refsource_MISCExploitThird Party Advisory
https://yan-1-20.github.io/2018/11/20/2018/11/2018-11-20/
x_refsource_MISCBroken Link

Link	Providers	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilities/153216		Third Party Advisory
https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/20/2018/11/2018-11-20/index.html		x_refsource_MISCExploitThird Party Advisory
https://yan-1-20.github.io/2018/11/20/2018/11/2018-11-20/		x_refsource_MISCBroken Link

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 20, 2018

Updated Aug 5, 2024

Reserved Nov 20, 2018

Link CVE-2018-19390

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-19390

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-19390