Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.8

Foxit PDF Reader can run code from malicious PDF

CVE-2018-3993 · published 8 years ago
Summary

Foxit PDF Reader version 9.2.0.9297 may execute any program when it opens a specially crafted PDF file. An attacker only needs to convince a user to open the file, or to visit a web page if the Reader’s browser plug‑in is turned on. Update to the latest Reader release or disable the browser plug‑in until a patch is applied.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
foxitsoftware phantompdf <= 9.2.0.9297
cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:*
foxitsoftware reader <= 9.2.0.9297
cpe:2.3:a:foxitsoftware:reader:*:*:*:*:*:*:*:*
Original advisory text
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed ...
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
8.8 High
Exploitation
3% chance of attack within 30 days
Type
CWE-416Use After Free
Timeline
Published3 Oct 2018
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2018-3993 · NVD
Track software like this
Free during beta