CVE-2018-1180: Use After Free
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AFSimpleCalculate method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5491.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What must an attacker do to exploit this issue?
The attacker must induce the target to visit a malicious page or open a malicious file. No authentication or existing privileges are required, and the attack can be conducted remotely.
What level of access could successful exploitation provide?
Successful exploitation can execute arbitrary code in the context of the current process. The vulnerability is rated high severity with CVSS 8.8 and affects confidentiality, integrity, and availability.
Which products are identified as affected?
The affected software listed is Foxitsoftware Foxit Reader and Foxitsoftware Phantompdf. The description specifically identifies Foxit Reader 9.0.0.29935 as a vulnerable installation.
Is a fix available?
Yes. A patch is available; the provided Foxit security bulletin reference is the relevant vendor remediation source.