CVE-2018-1173

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the XFA borderColor attribute. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5436.

• CWE-416
• CWE-416

• https://www.foxitsoftware.com/support/security-bulletins.phpPatch, Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-18-311Third Party Advisory, VDB Entry
• https://www.foxitsoftware.com/support/security-bulletins.phpPatch, Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-18-311Third Party Advisory, VDB Entry

Published

May 17, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11724The mobi_pk1_decrypt function in encryption.c in Libmobi 0.3…
• CVE-2018-11725The mobi_parse_index_entry function in index.c in Libmobi 0.…
• CVE-2018-11726The mobi_decode_font_resource function in util.c in Libmobi …
• CVE-2018-11727The libfsntfs_attribute_read_from_mft function in libfsntfs_…5.5
• CVE-2018-11728The libfsntfs_reparse_point_values_read_data function in lib…5.5
• CVE-2018-11729The libfsntfs_mft_entry_read_header function in libfsntfs_mf…
• CVE-2018-11730The libfsntfs_security_descriptor_values_free function in li…
• CVE-2018-11731The libfsntfs_mft_entry_read_attributes function in libfsntf…
• CVE-2018-11734In e107 v2.1.7, output without filtering results in XSS.
• CVE-2018-11735index.php?action=createaccount in Ximdex 4.0 has XSS via the…
• CVE-2018-11736An issue was discovered in Pluck before 4.7.7-dev2. /data/in…
• CVE-2018-11737An issue was discovered in libtskfs.a in The Sleuth Kit (TSK…