Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-13315

Опубликовано: 04 окт. 2019
Источник: nvd
CVSS3: 7.8
CVSS3: 7.8
CVSS2: 6.8
EPSS Низкий

Описание

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the removeField method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-8656.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:foxitsoftware:reader:*:*:*:*:*:*:*:*
Версия до 9.5.0.20723 (включая)
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Конфигурация 2

Одновременно

Одно из

cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:*
Версия до 8.3.10.42705 (включая)
cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:*
Версия от 9.0 (включая) до 9.5.0.20723 (включая)
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 75%
0.0086
Низкий

7.8 High

CVSS3

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-416
CWE-416

Связанные уязвимости

CVSS3: 7.8
github
больше 3 лет назад

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the removeField method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-8656.

EPSS

Процентиль: 75%
0.0086
Низкий

7.8 High

CVSS3

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-416
CWE-416