CVE-2018-19389

Name: CVE-2018-19389
Creator: NVD / NIST
Published: 2018-11-20T21:29:01.433+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 2.01%

Last modified Jun 17, 2026

CVE-2018-19389 is a vulnerability of currently unknown severity. FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (Break instruction exception and application crash) via BMP data because of a ConvertToPDF_x86!ConnectedPDF::ConnectedPDFSDK::FCP_SendEmailNotification issue.. EPSS estimates a 2.01% chance of exploitation in the next 30 days.

Description

FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (Break instruction exception and application crash) via BMP data because of a ConvertToPDF_x86!ConnectedPDF::ConnectedPDFSDK::FCP_SendEmailNotification issue.

Metrics

EPSS Probability

2.01%

78.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-125

Affected Software

Vendor	Product	Versions
Foxitsoftware	Foxit Reader	9.3.0.10826

References

https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/20/2018/11/2018-11-20/index.htmlExploit, Third Party Advisory
https://yan-1-20.github.io/2018/11/20/2018/11/2018-11-20/Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/153215Third Party Advisory
https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/20/2018/11/2018-11-20/index.htmlExploit, Third Party Advisory
https://yan-1-20.github.io/2018/11/20/2018/11/2018-11-20/Broken Link

Timeline

Published: Nov 20, 2018
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-19389?

How severe is CVE-2018-19389?

Severity scoring for CVE-2018-19389 is pending analysis. The EPSS model estimates a 2.01% probability of exploitation in the next 30 days.

How do I fix CVE-2018-19389?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-19389?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST