CVE-2018-9958

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Foxit PDF Reader 9.0.1.1049 - Pointer Overwrite Use-After-Free (Metasploit)2018-08-27 · local · windows · Verified
• Foxit Reader 9.0.1.1049 - Remote Code Execution2018-06-25 · remote · windows · Verified
• Foxit Reader 9.0.1.1049 - Arbitrary Code Execution2020-11-27 · local · windows

Impact

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Text Annotations. When setting the point attribute, the process does not properly validate the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5620.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://packetstormsecurity.com/files/160240/Foxit-Reader-9.0.1.1049-Arbitrary-Code-Execution.html
• https://www.exploit-db.com/exploits/44941/
• https://www.exploit-db.com/exploits/45269/
• https://www.foxitsoftware.com/support/security-bulletins.php
• https://zerodayinitiative.com/advisories/ZDI-18-342
• http://packetstormsecurity.com/files/160240/Foxit-Reader-9.0.1.1049-Arbitrary-Code-Execution.html
• https://www.exploit-db.com/exploits/44941/
• https://www.exploit-db.com/exploits/45269/
• https://www.foxitsoftware.com/support/security-bulletins.php
• https://zerodayinitiative.com/advisories/ZDI-18-342