CVE-2019-5031 - An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.4.1.16828 · CoreCVE

Back Back to CVE browser

HIGH

An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.4.1.16828

Published Oct 2, 2019

8.8

HIGH

CVSS 3.1

EPSS 6.01%

Description

An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.4.1.16828. A specially crafted PDF document can trigger an out-of-memory condition which isn't handled properly, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.

Affected products

Vendor n/a Product Foxit Default
n/a
- Version
  Foxit Software Foxit PDF Reader 9.4.1.16828.
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Foxit

n/a

Version	Status	Constraints
Foxit Software Foxit PDF Reader 9.4.1.16828.	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-703

CWE-770

Allocation of Resources Without Limits

References (1)

https://talosintelligence.com/vulnerability_reports/TALOS-2019-0793
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://talosintelligence.com/vulnerability_reports/TALOS-2019-0793		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner talos

Published Oct 2, 2019

Updated Aug 4, 2024

Reserved Jan 4, 2019

Link CVE-2019-5031

CISA Vulnrichment

Updated n/a

Status Modified

Modified Jun 17, 2026

Link CVE-2019-5031

Severity n/a

Public date n/a

Links CVE-2019-5031