CVE-2018-19418 Foxit PDF ActiveX before 5.5.1 allows remote code execution via command injection because of the lack of a security permission control.
HighCVSS 7.8
EPSS 8.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Foxit PDF ActiveX before 5.5.1 allows remote code execution via command injection because of the lack of a security permission control.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| foxitsoftware pdf activex | < 5.5.1 | 5.5.1 |
References
- vimeo.com exploit third-party-advisory
- www.foxitsoftware.com vendor-advisory