CVE-2018-19341: High severity Foxitsoftware Foxit Reader vulnerability
The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Read Access Violation near NULL starting at FoxitReader!std::basicostream >::operator<<+0x0000000000087906" issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-19341?
CVE-2018-19341 is categorized as a denial of service vulnerability due to an out-of-bounds read.
How do I fix CVE-2018-19341?
To fix CVE-2018-19341, you should upgrade to a patched version of Foxit Reader provided by the vendor.
What products are affected by CVE-2018-19341?
CVE-2018-19341 affects Foxit Reader version 9.3.0.10826 and the U3D plugin version 9.3.0.10809.
Can CVE-2018-19341 lead to data exposure?
Yes, CVE-2018-19341 can allow remote attackers to obtain sensitive information through exploitation.
What type of attack does CVE-2018-19341 facilitate?
CVE-2018-19341 facilitates a denial of service attack due to a read access violation.