CVE-2018-19390
Last modified
CVE-2018-19390 is a vulnerability of currently unknown severity. FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (Break instruction exception and application crash) via TIFF data because of a ConvertToPDF_x86!ConnectedPDF::ConnectedPDFSDK::FCP_SendEmailNotification issue.. EPSS estimates a 2.17% chance of exploitation in the next 30 days.
Description
FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (Break instruction exception and application crash) via TIFF data because of a ConvertToPDF_x86!ConnectedPDF::ConnectedPDFSDK::FCP_SendEmailNotification issue.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Foxitsoftware | Foxit Reader | 9.3.0.10826 |
References
- https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/20/2018/11/2018-11-20/index.htmlExploit, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/153216Third Party Advisory
- https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/20/2018/11/2018-11-20/index.htmlExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-19390?
How severe is CVE-2018-19390?
How do I fix CVE-2018-19390?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-1938IBM Cloud Private 3.1.1 could alllow a local user with admin…4.4
- CVE-2018-19386SolarWinds Database Performance Analyzer 11.1.457 contains a…
- CVE-2018-19387Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2018-19388FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote at…
- CVE-2018-19389FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote at…
- CVE-2018-1939IBM Cloud Private 3.1.1 could allow a remote attacker to con…6.8
- CVE-2018-19391Cobham Satcom Sailor 250 and 500 devices before 1.25 contain…
- CVE-2018-19392Cobham Satcom Sailor 250 and 500 devices before 1.25 contain…
- CVE-2018-19393Cobham Satcom Sailor 800 and 900 devices contained a vulnera…
- CVE-2018-19394Cobham Satcom Sailor 800 and 900 devices contained persisten…
- CVE-2018-19395ext/standard/var.c in PHP 5.x through 7.1.24 on Windows allo…
- CVE-2018-19396ext/standard/var_unserializer.c in PHP 5.x through 7.1.24 al…
Are you affected by CVE-2018-19390?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
