Vulnerability Description
The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Read Access Violation starting at U3DBrowser+0x000000000000347a" issue.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Foxitsoftware | Foxit Reader | 9.3.0.10826 |
| Foxitsoftware | U3D | 9.3.0.10809 |
Related Weaknesses (CWE)
References
- https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/20Broken LinkThird Party Advisory
- https://github.com/Yan-1-20/Yan-1-20.github.io/tree/master/2018/11/08/2018/11/20Broken LinkThird Party Advisory
- https://yan-1-20.github.io/2018/11/08/2018/11/2018-11-08-2/Broken LinkThird Party Advisory
- https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/Broken LinkThird Party Advisory
- https://www.foxitsoftware.com/support/security-bulletins.phpVendor Advisory
- https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/20Broken LinkThird Party Advisory
- https://github.com/Yan-1-20/Yan-1-20.github.io/tree/master/2018/11/08/2018/11/20Broken LinkThird Party Advisory
- https://yan-1-20.github.io/2018/11/08/2018/11/2018-11-08-2/Broken LinkThird Party Advisory
- https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/Broken LinkThird Party Advisory
FAQ
What is CVE-2018-19342?
CVE-2018-19342 is a vulnerability with a CVSS score of 7.1 (HIGH). The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive inf...
How severe is CVE-2018-19342?
CVE-2018-19342 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-19342?
Check the references section above for vendor advisories and patch information. Affected products include: Foxitsoftware Foxit Reader, Foxitsoftware U3D.