CVE-2018-3940: Use After Free
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused. An attacker needs to trick the user to open the malicious file to trigger.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-3940?
CVE-2018-3940 is classified as a high severity vulnerability due to its potential for exploitation through malicious PDF files.
How do I fix CVE-2018-3940?
To resolve CVE-2018-3940, update Foxit PhantomPDF or Foxit Reader to version 9.2.0.9297 or later.
Which versions of Foxit Software are affected by CVE-2018-3940?
CVE-2018-3940 affects Foxit Reader and PhantomPDF versions up to and including 9.2.0.9297.
What type of vulnerability is CVE-2018-3940?
CVE-2018-3940 is a use-after-free vulnerability occurring in the JavaScript engine of Foxit Software's PDF Reader.
What conditions are required for an attacker to exploit CVE-2018-3940?
An attacker must trick a user into opening a specially crafted malicious PDF document to exploit CVE-2018-3940.