Foxit Reader 9.3.0.10826 u3d plugin plugins\U3DBrowser.fpi Return Value out-of-bounds

Summaryinfo

A vulnerability marked as critical has been reported in Foxit Reader 9.3.0.10826. The impacted element is an unknown function of the file plugins\U3DBrowser.fpi of the component u3d plugin. This manipulation as part of Return Value causes out-of-bounds. This vulnerability is handled as CVE-2018-19344. The attack can be initiated remotely. There is not any exploit available.

Detailsinfo

A vulnerability classified as critical was found in Foxit Reader 9.3.0.10826 (Document Reader Software). Affected by this vulnerability is an unknown code of the file plugins\U3DBrowser.fpi of the component u3d plugin. The manipulation as part of a Return Value leads to a out-of-bounds vulnerability. The CWE definition for the vulnerability is CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Data from Faulting Address may be used as a return value starting at U3DBrowser!PlugInMain+0x0000000000031a75" issue.

The bug was discovered 11/10/2018. The weakness was released 11/17/2018 (Website). It is possible to read the advisory at github.com. This vulnerability is known as CVE-2018-19344 since 11/17/2018. The attack can be launched remotely. The exploitation doesn't need any form of authentication. It demands that the victim is doing some kind of user interaction. Technical details of the vulnerability are known, but there is no available exploit.

The vulnerability was handled as a non-public zero-day exploit for at least 7 days. During that time the estimated underground price was around $0-$5k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Entries connected to this vulnerability are available at VDB-126988, VDB-126989, VDB-126990 and VDB-126992. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Document Reader Software

Vendor

• Foxit

Name

• Reader

Version

• 9.3.0.10826

License

• free

Website

• Vendor: https://www.foxitsoftware.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion