CVE-2018-20249

In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref entries using the DAOpenFile or DAOpenFileReadOnly functions may result in an access violation caused by out of bounds memory access.

CVSS v3 8.8 HIGH
CVSS v2.0 6.8 MEDIUM

8.8^/10

CVSS v3 : HIGH

Vector : AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.securityfocus.com/bid/106306	Third Party Advisory VDB Entry
https://www.foxitsoftware.com/support/security-bulletins.php	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:foxitsoftware:quick_pdf_library:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-12-24 18:29

Updated : 2024-02-28 16:48

NVD link : CVE-2018-20249

Mitre link : CVE-2018-20249

CVE.ORG link : CVE-2018-20249

JSON object : View

Products Affected

foxitsoftware

quick_pdf_library

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-787

Out-of-bounds Write

{"id": "CVE-2018-20249", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2018-12-24T18:29:00.397", "references": [{"url": "http://www.securityfocus.com/bid/106306", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@checkpoint.com"}, {"url": "https://www.foxitsoftware.com/support/security-bulletins.php", "tags": ["Vendor Advisory"], "source": "cve@checkpoint.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}, {"type": "Secondary", "source": "cve@checkpoint.com", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref entries using the DAOpenFile or DAOpenFileReadOnly functions may result in an access violation caused by out of bounds memory access."}, {"lang": "es", "value": "En Foxit Quick PDF Library (todas las versiones anteriores a la 16.12), hay un problema al cargar un PDF mal formado o malicioso que contiene entradas xref inv\u00e1lidas. El uso de las funciones DAOpenFile o DAOpenFileReadOnly podr\u00eda resultar en una violaci\u00f3n de acceso provocada por un acceso a la memoria fuera de l\u00edmites."}], "lastModified": "2019-10-09T23:39:35.933", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:foxitsoftware:quick_pdf_library:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7755DB64-8892-44BE-9CC1-664DF7830F19", "versionEndExcluding": "16.12"}], "operator": "OR"}]}], "sourceIdentifier": "cve@checkpoint.com"}