VULNERABILITY INTELLIGENCE

CVE-2018-19447

CVSS score7.8 HIGH
EPSS probability4.90%
CISA KEVNot currently listed
Published2019-06-17
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A stack-based buffer overflow can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing the URI string. An attacker can leverage this to gain remote code execution.

Weakness classification

  • CWE-787: Out-of-bounds Write

Primary references