VULNERABILITY INTELLIGENCE

CVE-2018-19446

CVSS score7.8 HIGH
EPSS probability2.21%
CISA KEVNot currently listed
Published2019-06-17
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.createDataObject is used. An attacker can leverage this to gain remote code execution.

Weakness classification

  • CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references