CVE-2018-19445

A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API app.launchURL is…

published June 17, 2019

CVSS
—
EPSS
3%
Percentile
85.5
In the wild
Unconfirmed
What it is

A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API app.launchURL is used. An attacker can leverage this to gain remote code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02642 · 85.5th percentile
Published
2019-06-17T19:42Z
EPSS history
Timeline
  • 17 JUN 19:42Z
    A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API app.launchURL is…
    cvelistv5