CVE-2018-18933: Critical severity foxit reader vulnerability

Published Nov 5, 2018

Updated

The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Read Access Violation near NULL starting at FoxitReader!safevsnprintf+0x00000000002c4330" issue.

Affected Software

2 affected components

Foxitsoftware Foxit Reader=9.3.0.10826

Foxitsoftware U3d=9.3.0.10809

Remediation

Patch Available

https://www.foxitsoftware.com/support/security-bulletins.php

Event History

Nov 5, 2018

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2018-18933?

CVE-2018-18933 has a moderate severity rating due to its potential to cause denial of service and expose sensitive information.

How do I fix CVE-2018-18933?

To fix CVE-2018-18933, update Foxit Reader to the latest version provided by Foxit Software.

What types of attacks are associated with CVE-2018-18933?

CVE-2018-18933 is associated with denial of service attacks and exploitation for sensitive information disclosure.

Which versions of Foxit Reader are affected by CVE-2018-18933?

Foxit Reader version 9.3.0.10826 is affected by CVE-2018-18933.

Can CVE-2018-18933 affect my system security?

Yes, CVE-2018-18933 can compromise system security by allowing remote attackers to exploit the vulnerability.