ByteOS Network

NVD Vulnerability Details :

CVE-2018-20249

Modified

Source-cve@checkpoint.com

Published At-24 Dec, 2018 | 18:29

Updated At-09 Oct, 2019 | 23:39

In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref entries using the DAOpenFile or DAOpenFileReadOnly functions may result in an access violation caused by out of bounds memory access.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	8.8	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

Foxit Software Incorporated

>>quick_pdf_library>>Versions before 16.12(exclusive)

cpe:2.3:a:foxitsoftware:quick_pdf_library:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov
CWE-787	Secondary	cve@checkpoint.com

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/106306	cve@checkpoint.com	Third Party Advisory VDB Entry
https://www.foxitsoftware.com/support/security-bulletins.php	cve@checkpoint.com	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History