ZeroHour

CVE-2018-20249

CVSS 3.0
8.8 high
EPSS
1%p72
Published
()
Modified
Description

In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref entries using the DAOpenFile or DAOpenFileReadOnly functions may result in an access violation caused by out of bounds memory access.

Vendors
foxitsoftware
Products
quick pdf library
Weakness
CWE-787, CWE-119
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.