FP
Product
Foxit Pdf Sdk Activex
10
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 0Low 0
Watch
Add Foxit Pdf Sdk Activex to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-19450 | 7.8 | Jun 17 | A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing a launch action Affected: through 5.5.0 |
| CVE-2018-19449 | 7.8 | Jun 17 | A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.exportAsFDF is used Affected: through 5.5.0 |
| CVE-2018-19448 | 7.8 | Jun 17 | In Foxit Reader SDK (ActiveX) Professional 5.4.0.1031, an uninitialized object in IReader_ContentProvider::GetDocEventHandler occurs when embedding the control into Office… Affected: through 5.5.0 |
| CVE-2018-19447 | 7.8 | Jun 17 | A stack-based buffer overflow can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing the URI string Affected: through 5.5.0 |
| CVE-2018-19446 | 7.8 | Jun 17 | A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.createDataObject is used Affected: through 5.5.0 |
| CVE-2018-19445 | 7.8 | Jun 17 | A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API app.launchURL is used Affected: through 5.5.0 |
| CVE-2018-19444 | 7.8 | Jun 17 | A use after free in the TextBox field Validate action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 Affected: through 5.5.0 |
| CVE-2018-19452 | 7.8 | Jun 7 | A use after free in the TextBox field Mouse Enter action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 Affected: through 5.5.0 |
| CVE-2018-19451 | 7.8 | Jun 7 | A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when using the Open File action on a Field Affected: through 5.5.0 |
| CVE-2014-8074 | – | Oct 17 | Buffer overflow in the SetLogFile method in Foxit.FoxitPDFSDKProCtrl.5 in Foxit PDF SDK ActiveX 2.3 through 5.0.1820 before 5.0.2.924 allows remote attackers to execute arbitrary… Affected: 2.3; 3.0; 4.0; 5.0.0; 5.0.1.820 |
Showing 10
