CVE-2018-19452 Use after free in n/a

High 7.8 Published 7 Jun 2019 Updated 5 Aug 2024

A use-after-free vulnerability in Foxit Reader SDK allows remote code execution via specially crafted PDF files.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2018-19452?

CVE-2018-19452 is a high-severity use after free vulnerability in n/a, published on 7 Jun 2019. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

A use after free in the TextBox field Mouse Enter action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19444, this has a different free location and requires different JavaScript code for exploitation.

Weakness: CWE-416

Which versions are affected by CVE-2018-19452?

It affects 1 product.

Products include Foxitsoftware Foxit Pdf Sdk Activex.

How do I fix CVE-2018-19452?

No fix has been published for CVE-2018-19452 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.

Is CVE-2018-19452 being exploited?

There is no known exploitation of CVE-2018-19452 in the wild and no public exploit code.

Sources

Also known as GHSA-3qgg-5wf9-23cw.