CVE-2018-14442

Foxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free that leads to Remote Code Execution, aka V-88f4smlocs.

CVSS v3.0 NVD

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

4.74% chance of exploitation in the next 30 days, 92nd percentile

Published

2018-07-20

Updated

2024-09-16

Proof-of-concept exploits (3)

• payatu/CVE-2018-1444258★ · 2018-12-28
• sandi-go/PS-2018-002---CVE-2018-144420★ · 2019-10-15
• sharmasandeepkr/PS-2018-002---CVE-2018-144420★ · 2019-10-15

Security advisories

• https://www.foxitsoftware.com/support/security-bulletins.php

References

• CVE Record
• NVD entry

Related

• CVE-2015-6086
• CVE-2017-5005
• CVE-2017-5638
• CVE-2018-12798
• CVE-2018-15968
• CVE-2018-8389