CVE-2018-19389

Опубликовано: 20 нояб. 2018

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (Break instruction exception and application crash) via BMP data because of a ConvertToPDF_x86!ConnectedPDF::ConnectedPDFSDK::FCP_SendEmailNotification issue.

Ссылки

https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/20/2018/11/2018-11-20/index.html
Exploit
Third Party Advisory
https://yan-1-20.github.io/2018/11/20/2018/11/2018-11-20/
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/153215
Third Party Advisory
https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/20/2018/11/2018-11-20/index.html
Exploit
Third Party Advisory
https://yan-1-20.github.io/2018/11/20/2018/11/2018-11-20/
Broken Link

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:foxitsoftware:foxit_reader:9.3.0.10826:*:*:*:*:*:*:*

EPSS

Процентиль: 12%

0.0004

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

GHSA-wpjq-rpc2-x2x2