Foxit Reader 9.0.1.1049 getOCGs type conversion

Summaryinfo

A vulnerability was found in Foxit Reader 9.0.1.1049. It has been declared as critical. Impacted is the function getOCGs. Executing a manipulation can lead to type conversion. This vulnerability is registered as CVE-2018-14256. It is possible to launch the attack remotely. No exploit is available.

Detailsinfo

A vulnerability was found in Foxit Reader 9.0.1.1049 (Document Reader Software). It has been declared as critical. This vulnerability affects the function getOCGs. The manipulation with an unknown input leads to a type conversion vulnerability. The CWE definition for the vulnerability is CWE-704. The product does not correctly convert an object, resource, or structure from one type to a different type. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the getOCGs method. By performing actions in JavaScript, an attacker can trigger a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6019.

The bug was discovered 07/19/2018. The weakness was published 07/31/2018 (Website). The advisory is shared for download at foxitsoftware.com. This vulnerability was named CVE-2018-14256 since 07/16/2018. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Successful exploitation requires user interaction by the victim. There are known technical details, but no exploit is available.

The vulnerability was handled as a non-public zero-day exploit for at least 12 days. During that time the estimated underground price was around $0-$5k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Similar entries are available at VDB-82783, VDB-82784, VDB-82785 and VDB-82786. Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Document Reader Software

Vendor

• Foxit

Name

• Reader

Version

• 9.0.1.1049

License

• free

Website

• Vendor: https://www.foxitsoftware.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion