CVE-2018-9951: Use After Free
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of CPDFObject objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5414.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Foxit Readerto a version that resolves this vulnerability.Fixed in 9.0.0.29935Patch ZDI-CAN-5414
Event History
Frequently Asked Questions
What is the severity of CVE-2018-9951?
CVE-2018-9951 is classified as high severity due to its potential for remote code execution.
How do I fix CVE-2018-9951?
To mitigate CVE-2018-9951, upgrade to Foxit Reader version 9.0.1.1049 or later, or Foxit PhantomPDF version 9.0.1.1049 or later.
Who is affected by CVE-2018-9951?
Users of Foxit Reader and Foxit PhantomPDF versions up to 9.0.1.1049 are affected by CVE-2018-9951.
What types of attacks are possible with CVE-2018-9951?
CVE-2018-9951 allows remote attackers to execute arbitrary code upon user interaction with malicious pages or files.
Is user interaction required to exploit CVE-2018-9951?
Yes, user interaction is required for exploiting CVE-2018-9951, as the target must visit a malicious page or open a malicious file.