CVE-2018-19450

A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing a launch action. An attacker can leverage this to gain remote code execution.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2019-06-17

Last modified

2024-08-05

Weaknesses

CWE-77

Affected products

• Foxit Pdf Sdk Activex (Foxitsoftware)

References

• https://www.foxitsoftware.com/support/security-bulletins.php