Vulnerabilities > CVE-2018-14294 - Use After Free vulnerability in Foxitsoftware Foxit Reader

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

foxitsoftware

CWE-416

NVD

Published: 2018-07-31

Updated: 2019-10-09

Summary

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of FileAttachment annotations. By manipulating a document's elements an attacker can cause a pointer to be reused after it has been freed. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6211.

Vulnerable Configurations

Part	Description	Count
Application	Foxitsoftware Foxitsoftware Foxit Reader 2.0 Foxitsoftware Foxit Reader 2.2 Foxitsoftware Foxit Reader 2.3 Foxitsoftware Foxit Reader 3.0 Foxitsoftware Foxit Reader 3.1 Foxitsoftware Foxit Reader 3.1.0.0111 Foxitsoftware Foxit Reader 3.1.0.0824 Foxitsoftware Foxit Reader 3.1.1.0901 Foxitsoftware Foxit Reader 3.1.2.1013 Foxitsoftware Foxit Reader 3.1.2.1030 Foxitsoftware Foxit Reader 3.1.4 Foxitsoftware Foxit Reader 3.1.4.1125 Foxitsoftware Foxit Reader 3.2 Foxitsoftware Foxit Reader 3.2.0.0303 Foxitsoftware Foxit Reader 3.2.1.0401 Foxitsoftware Foxit Reader 3.3 Foxitsoftware Foxit Reader 3.3.0.0430 Foxitsoftware Foxit Reader 3.3.1 Foxitsoftware Foxit Reader 3.3.1.0520 Foxitsoftware Foxit Reader 4.0 Foxitsoftware Foxit Reader 4.0.0.0619 Foxitsoftware Foxit Reader 4.1 Foxitsoftware Foxit Reader 4.1.0.0726 Foxitsoftware Foxit Reader 4.1.1 Foxitsoftware Foxit Reader 4.1.1.0805 Foxitsoftware Foxit Reader 4.2 Foxitsoftware Foxit Reader 4.2.0.0928 Foxitsoftware Foxit Reader 4.3 Foxitsoftware Foxit Reader 4.3.0.1110 Foxitsoftware Foxit Reader 4.3.1.0218 Foxitsoftware Foxit Reader 5.0 Foxitsoftware Foxit Reader 5.0.1.0523 Foxitsoftware Foxit Reader 5.0.2 Foxitsoftware Foxit Reader 5.0.2.0718 Foxitsoftware Foxit Reader 5.1 Foxitsoftware Foxit Reader 5.1.0.1021 Foxitsoftware Foxit Reader 5.1.3 Foxitsoftware Foxit Reader 5.1.3.1201 Foxitsoftware Foxit Reader 5.1.4.0104 Foxitsoftware Foxit Reader 5.3 Foxitsoftware Foxit Reader 5.3.0.0423 Foxitsoftware Foxit Reader 5.3.1 Foxitsoftware Foxit Reader 5.3.1.0606 Foxitsoftware Foxit Reader 5.4 Foxitsoftware Foxit Reader 5.4.2.0901 Foxitsoftware Foxit Reader 5.4.3 Foxitsoftware Foxit Reader 5.4.3.0920 Foxitsoftware Foxit Reader 5.4.5 Foxitsoftware Foxit Reader 5.4.5.0114 Foxitsoftware Foxit Reader 6.0 Foxitsoftware Foxit Reader 6.0.2.0413 Foxitsoftware Foxit Reader 6.0.3 Foxitsoftware Foxit Reader 6.0.3.0524 Foxitsoftware Foxit Reader 6.0.5 Foxitsoftware Foxit Reader 6.0.5.0618 Foxitsoftware Foxit Reader 6.1 Foxitsoftware Foxit Reader 6.1.1.1031 Foxitsoftware Foxit Reader 6.1.2 Foxitsoftware Foxit Reader 6.1.2.1224 Foxitsoftware Foxit Reader 6.1.4 Foxitsoftware Foxit Reader 6.1.4.0217 Foxitsoftware Foxit Reader 6.2 Foxitsoftware Foxit Reader 6.2.0.0429 Foxitsoftware Foxit Reader 6.2.1 Foxitsoftware Foxit Reader 6.2.1.0618 Foxitsoftware Foxit Reader 7.0 Foxitsoftware Foxit Reader 7.0.3.916 Foxitsoftware Foxit Reader 7.0.6 Foxitsoftware Foxit Reader 7.0.6.1126 Foxitsoftware Foxit Reader 7.1 Foxitsoftware Foxit Reader 7.1.0.306 Foxitsoftware Foxit Reader 7.1.5 Foxitsoftware Foxit Reader 7.1.5.425 Foxitsoftware Foxit Reader 7.2 Foxitsoftware Foxit Reader 7.2.0.722 Foxitsoftware Foxit Reader 7.2.2 Foxitsoftware Foxit Reader 7.2.2.0929 Foxitsoftware Foxit Reader 7.2.8 Foxitsoftware Foxit Reader 7.2.8.1124 Foxitsoftware Foxit Reader 7.3 Foxitsoftware Foxit Reader 7.3.0.118 Foxitsoftware Foxit Reader 7.3.4 Foxitsoftware Foxit Reader 7.3.4.311 Foxitsoftware Foxit Reader 8.0 Foxitsoftware Foxit Reader 8.0.0.624 Foxitsoftware Foxit Reader 8.0.2 Foxitsoftware Foxit Reader 8.0.2.805 Foxitsoftware Foxit Reader 8.1 Foxitsoftware Foxit Reader 8.1.0.1013 Foxitsoftware Foxit Reader 8.1.1 Foxitsoftware Foxit Reader 8.1.1.1115 Foxitsoftware Foxit Reader 8.1.4 Foxitsoftware Foxit Reader 8.1.4.1208 Foxitsoftware Foxit Reader 8.2 Foxitsoftware Foxit Reader 8.2.0.2051 Foxitsoftware Foxit Reader 8.2.1 Foxitsoftware Foxit Reader 8.2.1.6871 Foxitsoftware Foxit Reader 8.3 Foxitsoftware Foxit Reader 8.3.0.14878 Foxitsoftware Foxit Reader 8.3.1 Foxitsoftware Foxit Reader 8.3.1.21155 Foxitsoftware Foxit Reader 8.3.2 Foxitsoftware Foxit Reader 8.3.2.25013 Foxitsoftware Foxit Reader 9.0 Foxitsoftware Foxit Reader 9.0.0.29935 Foxitsoftware Foxit Reader 9.0.1 Foxitsoftware Foxit Reader 9.0.1.104 Foxitsoftware Foxit Reader 9.0.1.1049 Foxitsoftware Foxit Reader 9.1 Foxitsoftware Foxit Reader 9.1.0 Foxitsoftware Foxit Reader 9.1.0.5096 Foxitsoftware Phantompdf 1.0.2 Foxitsoftware Phantompdf 2.0 Foxitsoftware Phantompdf 2.1 Foxitsoftware Phantompdf 2.1.1 Foxitsoftware Phantompdf 2.2 Foxitsoftware Phantompdf 2.2.1 Foxitsoftware Phantompdf 2.2.3 Foxitsoftware Phantompdf 3.0.1 Foxitsoftware Phantompdf 3.3 Foxitsoftware Phantompdf 3.4 Foxitsoftware Phantompdf 4.0 Foxitsoftware Phantompdf 4.1 Foxitsoftware Phantompdf 5.0.2 Foxitsoftware Phantompdf 5.0.2.0721 Foxitsoftware Phantompdf 5.0.3 Foxitsoftware Phantompdf 5.0.3.0811 Foxitsoftware Phantompdf 5.1 Foxitsoftware Phantompdf 5.1.1.1214 Foxitsoftware Phantompdf 5.1.2 Foxitsoftware Phantompdf 5.1.2.0305 Foxitsoftware Phantompdf 5.2 Foxitsoftware Phantompdf 5.2.0.0502 Foxitsoftware Phantompdf 5.2.1 Foxitsoftware Phantompdf 5.2.1.0615 Foxitsoftware Phantompdf 5.4 Foxitsoftware Phantompdf 5.4.0.0902 Foxitsoftware Phantompdf 5.4.2 Foxitsoftware Phantompdf 5.4.2.0918 Foxitsoftware Phantompdf 5.4.3 Foxitsoftware Phantompdf 5.4.3.1106 Foxitsoftware Phantompdf 6.0 Foxitsoftware Phantompdf 6.0.2.0413 Foxitsoftware Phantompdf 6.0.5 Foxitsoftware Phantompdf 6.0.5.0618 Foxitsoftware Phantompdf 6.0.7 Foxitsoftware Phantompdf 6.0.7.0806 Foxitsoftware Phantompdf 6.1 Foxitsoftware Phantompdf 6.1.1.1025 Foxitsoftware Phantompdf 6.1.2 Foxitsoftware Phantompdf 6.1.2.1227 Foxitsoftware Phantompdf 6.2 Foxitsoftware Phantompdf 6.2.0.0429 Foxitsoftware Phantompdf 6.2.1 Foxitsoftware Phantompdf 6.2.1.0168 Foxitsoftware Phantompdf 7.0 Foxitsoftware Phantompdf 7.0.3.916 Foxitsoftware Phantompdf 7.0.6 Foxitsoftware Phantompdf 7.0.6.1126 Foxitsoftware Phantompdf 7.1 Foxitsoftware Phantompdf 7.1.0.306 Foxitsoftware Phantompdf 7.1.3.320 Foxitsoftware Phantompdf 7.1.5 Foxitsoftware Phantompdf 7.1.5.425 Foxitsoftware Phantompdf 7.2 Foxitsoftware Phantompdf 7.2.0.0722 Foxitsoftware Phantompdf 7.2.0.722 Foxitsoftware Phantompdf 7.2.2 Foxitsoftware Phantompdf 7.2.2.0929 Foxitsoftware Phantompdf 7.3 Foxitsoftware Phantompdf 7.3.0.0118 Foxitsoftware Phantompdf 7.3.0.118 Foxitsoftware Phantompdf 7.3.4 Foxitsoftware Phantompdf 7.3.4.0311 Foxitsoftware Phantompdf 7.3.4.311 Foxitsoftware Phantompdf 7.3.9 Foxitsoftware Phantompdf 7.3.9.0816 Foxitsoftware Phantompdf 7.3.11 Foxitsoftware Phantompdf 7.3.11.1122 Foxitsoftware Phantompdf 7.3.13 Foxitsoftware Phantompdf 7.3.13.421 Foxitsoftware Phantompdf 7.3.15 Foxitsoftware Phantompdf 7.3.15.712 Foxitsoftware Phantompdf 7.3.17 Foxitsoftware Phantompdf 7.3.17.906 Foxitsoftware Phantompdf 8.0 Foxitsoftware Phantompdf 8.0.0.624 Foxitsoftware Phantompdf 8.0.2 Foxitsoftware Phantompdf 8.0.2.805 Foxitsoftware Phantompdf 8.0.5 Foxitsoftware Phantompdf 8.1 Foxitsoftware Phantompdf 8.1.0.1013 Foxitsoftware Phantompdf 8.1.1 Foxitsoftware Phantompdf 8.1.1.1115 Foxitsoftware Phantompdf 8.2 Foxitsoftware Phantompdf 8.2.0.2192 Foxitsoftware Phantompdf 8.2.1 Foxitsoftware Phantompdf 8.2.1.6871 Foxitsoftware Phantompdf 8.3 Foxitsoftware Phantompdf 8.3.0.14878 Foxitsoftware Phantompdf 8.3.1 Foxitsoftware Phantompdf 8.3.1.21155 Foxitsoftware Phantompdf 8.3.2 Foxitsoftware Phantompdf 8.3.2.25013 Foxitsoftware Phantompdf 8.3.5 Foxitsoftware Phantompdf 8.3.5.30351 Foxitsoftware Phantompdf 8.3.6 Foxitsoftware Phantompdf 8.3.6.35572 Foxitsoftware Phantompdf 8.3.7 Foxitsoftware Phantompdf 8.3.7.38093 Foxitsoftware Phantompdf 8.3.8.39677 Foxitsoftware Phantompdf 8.3.9 Foxitsoftware Phantompdf 8.3.9.41099 Foxitsoftware Phantompdf 8.3.10 Foxitsoftware Phantompdf 8.3.10.42705 Foxitsoftware Phantompdf 8.3.11 Foxitsoftware Phantompdf 8.3.11.45106 Foxitsoftware Phantompdf 8.3.12 Foxitsoftware Phantompdf 8.3.12.47136 Foxitsoftware Phantompdf 9.0 Foxitsoftware Phantompdf 9.0.0.29935 Foxitsoftware Phantompdf 9.0.1 Foxitsoftware Phantompdf 9.0.1.1049 Foxitsoftware Phantompdf 9.0.1.31049 Foxitsoftware Phantompdf 9.1 Foxitsoftware Phantompdf 9.1.0.5096	227
OS	Microsoft Microsoft Windows -	1

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References