CoreCVE
Back

HIGH

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.5096

Published Aug 1, 2018

Description

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner talos
Published Aug 1, 2018
Updated Sep 17, 2024
Reserved Jan 2, 2018
Link CVE-2018-3924
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-3924
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-3924