CVE-2018-9958: Use After Free
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Text Annotations. When setting the point attribute, the process does not properly validate the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5620.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Foxit Readerto a version that resolves this vulnerability.Fixed in 9.0.1.1049Patch ZDI-CAN-5620
Event History
Frequently Asked Questions
What is the severity of CVE-2018-9958?
CVE-2018-9958 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2018-9958?
To mitigate CVE-2018-9958, update Foxit Reader or Foxit PhantomPDF to the latest version available after 9.0.1.1049.
Is user interaction required to exploit CVE-2018-9958?
Yes, CVE-2018-9958 requires user interaction, as the vulnerable user must visit a malicious page or open a harmful file.
Which versions of Foxit Reader and PhantomPDF are affected by CVE-2018-9958?
CVE-2018-9958 affects Foxit Reader and PhantomPDF versions up to and including 9.0.1.1049.
What types of attacks can be executed using CVE-2018-9958?
CVE-2018-9958 allows attackers to execute arbitrary code, potentially leading to full system compromise.