CVE-2018-20249 in Quick PDF Library

Resumen

por MITRE

In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref entries using the DAOpenFile or DAOpenFileReadOnly functions may result in an access violation caused by out of bounds memory access.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservar: 2018-12-19
• Divulgación: 2018-12-24
• Moderación: aceptado
• Artículo: VDB-128378
• CPE: listo
• CWE: CWE-119 (confirmado)
• CVSS: 8.8 (NVD)
• EPSS: 0.01421
• KEV: no
• Actividades: muy bajo
• Sector: Hostingprovider, Government, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-20249
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-20249
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-20249/