Unscored severity · published Oct 17, 2014
CVE-2014-8074
Buffer overflow in the SetLogFile method in Foxit.FoxitPDFSDKProCtrl.5 in Foxit PDF SDK ActiveX 2.3 through 5.0.1820 before 5.0.2.924 allows remote attackers to execute arbitrary…
–
CVSS
3.7%
EPSS
No
On KEV
Description
Buffer overflow in the SetLogFile method in Foxit.FoxitPDFSDKProCtrl.5 in Foxit PDF SDK ActiveX 2.3 through 5.0.1820 before 5.0.2.924 allows remote attackers to execute arbitrary code via a long string, related to global variables.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.7% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FP
Foxit Pdf Sdk Activex · Foxitsoftware
2.3; 3.0; 4.0; 5.0.0; 5.0.1.820 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-8074
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-8074
Vendor Advisory
http://www.foxitsoftware.com/support/security_bulletins.php#FRD-22
www.securityfocus.com
http://www.securityfocus.com/bid/70608
www.zerodayinitiative.com
http://www.zerodayinitiative.com/advisories/ZDI-14-362/
More from Foxit Pdf Sdk Activex
7.8
CVE-2018-19450
A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing a launch action
7.8
CVE-2018-19449
A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.exportAsFDF is used
7.8
CVE-2018-19448
In Foxit Reader SDK (ActiveX) Professional 5.4.0.1031, an uninitialized object in IReader_ContentProvider::GetDocEventHandler occurs when embedding the control into Office…
7.8
CVE-2018-19447
A stack-based buffer overflow can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing the URI string
7.8
CVE-2018-19446
A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.createDataObject is used