ByteOS Network

NVD Vulnerability Details :

CVE-2018-20248

Modified

Source-cve@checkpoint.com

Published At-24 Dec, 2018 | 18:29

Updated At-09 Oct, 2019 | 23:39

In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref table pointers or invalid xref table data using the LoadFromFile, LoadFromString, LoadFromStream, DAOpenFile or DAOpenFileReadOnly functions may result in an access violation caused by out of bounds memory access.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.0

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 7.5

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

Foxit Software Incorporated

>>quick_pdf_library>>Versions before 16.12(exclusive)

cpe:2.3:a:foxitsoftware:quick_pdf_library:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov
CWE-787	Secondary	cve@checkpoint.com

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-787

Type: Secondary

Source: cve@checkpoint.com

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/106306	cve@checkpoint.com	Third Party Advisory VDB Entry
https://www.foxitsoftware.com/support/security-bulletins.php	cve@checkpoint.com	Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/106306

Source: cve@checkpoint.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://www.foxitsoftware.com/support/security-bulletins.php

Source: cve@checkpoint.com

Resource:

Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History