Published on June 4th, 2019 📆 | 7319 Views ⚑
0Foxit Reader up to 9.4.0 XFA Object Code Execution memory corruption
CVSS Meta Temp Score | Current Exploit Price (β) |
---|---|
6.0 | $0-$5k |
A vulnerability has been found in Foxit Reader up to 9.4.0 (Document Reader Software) and classified as critical. Affected by this vulnerability is a functionality of the component XFA Object Handler. The manipulation with an unknown input leads to a memory corruption vulnerability (Code Execution). The CWE definition for the vulnerability is CWE-119. As an impact it is known to affect confidentiality, integrity, and availability.
The bug was discovered 04/19/2019. The weakness was presented 06/03/2019. This vulnerability is known as CVE-2019-6761 since 01/24/2019. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Neither technical details nor an exploit are publicly available.
The vulnerability was handled as a non-public zero-day exploit for at least 45 days. During that time the estimated underground price was around $0-$5k.
Upgrading to version 9.4.0.16811 eliminates this vulnerability.
See 135916, 135915, 135912 and 135911 for similar entries.
Type
Vendor
Name
VulDB Meta Base Score: 6.3
VulDB Meta Temp Score: 6.0
VulDB Base Score: 6.3
VulDB Temp Score: 6.0
VulDB Vector: π
VulDB Reliability: π
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
π | π | π | π | π | π |
π | π | π | π | π | π |
π | π | π | π | π | π |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: π
VulDB Temp Score: π
VulDB Reliability: π
Class: Memory corruption / Code Execution (CWE-119)
Local: No
Remote: Yes
Availability: π
Status: Not defined
Price Prediction: π
Current Price Estimation: π
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Threat Intelligence
Threat: π
Adversaries: π
Geopolitics: π
Economy: π
Predictions: π
Remediation: πRecommended: Upgrade
Status: π
0-Day Time: π
Upgrade: Reader 9.4.0.16811
01/24/2019 CVE assigned
04/19/2019 Vulnerability found
06/03/2019 Advisory disclosed
06/04/2019 VulDB entry created
06/04/2019 VulDB last updateVendor: foxitsoftware.com
CVE: CVE-2019-6761 (π)
OSVDB: - Foxit Software Foxit Reader code execution
See also: π
Created: 06/04/2019 12:49 PM
Complete: π
Comments
Upgrade your account now!
https://vuldb.com/?id.135913
No comments yet. Please log in to comment.