CVE-2018-19341

Published: Nov 17, 2018Modified: Nov 21, 2024

7.1

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Exploitability: 1.8 / Impact: 5.2

Source: NVD

Description

The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Read Access Violation near NULL starting at FoxitReader!std::basic_ostream >::operator<<+0x0000000000087906" issue.

Affected (2)

Products: Foxitsoftware: Foxit Reader, U3d

2 products

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Foxitsoftware Foxit Reader	Version 9.3.0.10826
Foxitsoftware U3d	Version 9.3.0.10809

Related CWEs

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (5)

https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html

Source: cve@mitre.org

Broken LinkThird Party Advisory

https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/

Source: cve@mitre.org

Broken LinkThird Party Advisory

https://www.foxitsoftware.com/support/security-bulletins.php

Source: nvd@nist.gov

Vendor Advisory

https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party Advisory

https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party Advisory

Timeline

No history available yet.