CVE-2018-19341

The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Read Access Violation near NULL starting at FoxitReader!std::basic_ostream >::operator<<+0x0000000000087906" issue.

• CWE-125

• https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.htmlBroken Link, Third Party Advisory
• https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/Broken Link, Third Party Advisory
• https://www.foxitsoftware.com/support/security-bulletins.phpVendor Advisory
• https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.htmlBroken Link, Third Party Advisory
• https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/Broken Link, Third Party Advisory

Published

Nov 17, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-19332An issue was discovered in S-CMS v1.5. There is a CSRF vulne…
• CVE-2018-19333pkg/sentry/kernel/shm/shm.go in Google gVisor before 2018-11…
• CVE-2018-19334Google Monorail before 2018-05-04 has a Cross-Site Search (X…
• CVE-2018-19335Google Monorail before 2018-06-07 has a Cross-Site Search (X…
• CVE-2018-1934IBM Cognos Business Intelligence 10.2.2 is vulnerable to cro…8.8
• CVE-2018-19340Guriddo Form PHP 5.3 has XSS via the demos/jqform/defaultnod…
• CVE-2018-19342The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in F…
• CVE-2018-19343The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in F…
• CVE-2018-19344The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in F…
• CVE-2018-19345The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in F…
• CVE-2018-19346The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in F…
• CVE-2018-19347The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in F…