CVE-2018-9948

Related Files

Foxit PDF Reader 9.0.1.1049 Pointer Overwrite Use-After-Free

Posted Aug 24, 2018

Authored by mr_me, saelo, Jacob Robles, bit from meepwnn | Site metasploit.com

Foxit PDF Reader version 9.0.1.1049 has a use-after-free vulnerability in the Text Annotations component and the TypedArray's use uninitialized pointers. The vulnerabilities can be combined to leak a vtable memory address, which can be adjusted to point to the base address of the executable. A ROP chain can be constructed that will execute when Foxit Reader performs the UAF.

tags | exploit, vulnerability

advisories | CVE-2018-9948, CVE-2018-9958

SHA-256 | 328a4999829d5eb3b12ffaeb666a27977fb72410e1a96f44c840761020615f82

Download | Favorite | View

Foxit Reader 9.0.1.1049 Use-After-Free

Posted Aug 15, 2018

Authored by Manoj Ahuje

Foxit Reader version 9.0.1.1049 remote code execution exploit with DEP bypass on heap with shellcode.

tags | exploit, remote, shellcode, code execution

advisories | CVE-2018-9948, CVE-2018-9958

SHA-256 | 856e0ae7837f47fd2c2dc103ebfc93a1ff926dd85dc2d5bd3c30b11f47517528

Download | Favorite | View

Foxit Reader 9.0.1.1049 Remote Code Execution

Posted Jun 25, 2018

Authored by mr_me

Foxit Reader version 9.0.1.1049 suffers from a remote code execution vulnerability.

tags | exploit, remote, code execution

advisories | CVE-2018-9948, CVE-2018-9958

SHA-256 | bf72b6326ebb4c4437a3f788a33ad75112bc77e87bca036144808a27a94871f6

Download | Favorite | View