This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.3.10826. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within ConvertToPDF_x86.dll. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7613.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: zdi
Published: 2019-06-03T18:15:01
Updated: 2024-08-04T20:31:04.144Z
Reserved: 2019-01-24T00:00:00
Link: CVE-2019-6755
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2019-06-03T19:29:02.890
Modified: 2022-10-12T17:16:04.780
Link: CVE-2019-6755
Redhat
No data.