CVE-2018-20249 in Quick PDF Library

सारांश

द्वारा MITRE

In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref entries using the DAOpenFile or DAOpenFileReadOnly functions may result in an access violation caused by out of bounds memory access.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• आरक्षित करना: 19/12/2018
• प्रकटीकरण: 24/12/2018
• संयम: स्वीकृत
• प्रविष्टि: VDB-128378
• CPE: तैयार
• CWE: CWE-119 (पुष्टि की गई)
• CVSS: 8.8 (NVD)
• EPSS: 0.01421
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Pharma, Hostingprovider, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-20249
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-20249
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-20249/