CVE-2018-3956

MEDIUM Year: 2018
CVSS v3 Score
6.8
Medium
CVSS v2 Score
5.8
Medium
Weakness Type
CWE-125
View all →

Vulnerability Description

An exploitable out-of-bounds read vulnerability exists in the handling of certain XFA element attributes of Foxit Software's PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger an out-of-bounds read, which can disclose sensitive memory content and aid in exploitation when coupled with another vulnerability. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.

Related Vulnerabilities

CVE-2019-14283

MEDIUM
CVSS:6.8(Medium)

In the Linux kernel before 5.2.3, set_geometry in drivers/block/floppy.c does not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It can be triggered ...

CWE-1252019

CVE-2019-5516

MEDIUM
CVSS:6.8(Medium)

VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and 10.x before 10.1.6) updates addr...

CWE-1252019

CVE-2019-5517

MEDIUM
CVSS:6.8(Medium)

VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and 10.x before 10.1.6) contain mult...

CWE-1252019

CVE-2019-5518

MEDIUM
CVSS:6.8(Medium)

VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before 14.1.7), Fusion (11.x before 11.0.3, 10.x before 10...

CWE-1252019

CVE-2021-20254

MEDIUM
CVSS:6.8(Medium)

A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyon...

CWE-1252021

CVE-2022-0717

MEDIUM
CVSS:6.8(Medium)

Out-of-bounds Read in GitHub repository mruby/mruby prior to 3.2.

CWE-1252022