rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-14280 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the exportAsFDF XFA function. The issue results from the lack of proper validation of user-supplied data, which can lead to writing arbitrary files into attacker controlled locations. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5619.
Problem types: cwe_id: CWE-693
description: CWE-693-Protection Mechanism Failure
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14281 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the exportData XFA function. The issue results from the lack of proper validation of user-supplied data, which can lead to writing arbitrary files into attacker controlled locations. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5757.
Problem types: cwe_id: CWE-693
description: CWE-693-Protection Mechanism Failure
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14282 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of FlateDecode streams. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5763.
Problem types: cwe_id: CWE-665
description: CWE-665-Improper Initialization
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14283 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the highlightMode attribute. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5771.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14284 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the newDoc function. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5773.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14285 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the oneOfChild attribute. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5774.
Problem types: cwe_id: CWE-843
description: CWE-843-Access of Resource Using Incompatible Type ('Type Confusion')
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14286 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of arguments passed to the mailDoc function. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5770.
Problem types: cwe_id: CWE-843
description: CWE-843-Access of Resource Using Incompatible Type ('Type Confusion')
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14287 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of arguments passed to the instanceManager.nodes.append function. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5641.
Problem types: cwe_id: CWE-843
description: CWE-843-Access of Resource Using Incompatible Type ('Type Confusion')
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14288 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of arguments passed to the setFocus function. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5642.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14289 
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF documents. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-6221.
Problem types: cwe_id: CWE-125
description: CWE-125-Out-of-bounds Read
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14290 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF documents. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6222.
Problem types: cwe_id: CWE-122
description: CWE-122-Heap-based Buffer Overflow
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14291 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF documents. By manipulating a document's elements, an attacker can cause a pointer to be reused after it has been freed. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6231.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14292 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF documents. By manipulating a document's elements, an attacker can cause a pointer to be reused after it has been freed. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6232.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14293 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF documents. By manipulating a document's elements, an attacker can cause a pointer to be reused after it has been freed. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6233.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14294 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of FileAttachment annotations. By manipulating a document's elements an attacker can cause a pointer to be reused after it has been freed. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6211.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14295 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF Phantom PDF 9.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of PDF documents. When parsing shading patterns, the process does not properly validate user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6223.
Problem types: description: NO_CWE
Affected products: vendor: Foxit
product: Foxit PhantomPDF
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14296 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of Circle annotations. By manipulating a document's elements, an attacker can cause a pointer to be reused after it has been freed. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6212.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14297 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of FreeText annotations. By manipulating a document's elements, an attacker can cause a pointer to be reused after it has been freed. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6213.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14298 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of Ink annotations. By manipulating a document's elements, an attacker can cause a pointer to be reused after it has been freed. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6214.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14299 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of Line annotations. By manipulating a document's elements, an attacker can cause a pointer to be reused after it has been freed. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6215.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14300 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of Polygon annotations. By manipulating a document's elements, an attacker can cause a pointer to be reused after it has been freed. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6216.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14301 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of Sound annotations. By manipulating a document's elements, an attacker can cause a pointer to be reused after it has been freed. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6217.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14302 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of Square annotations. By manipulating a document's elements, an attacker can cause a pointer to be reused after it has been freed. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6218.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14303 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of StrikeOut annotations. By manipulating a document's elements, an attacker can cause a pointer to be reused after it has been freed. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6219.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14304 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of Text annotations. By manipulating a document's elements, an attacker can cause a pointer to be reused after it has been freed. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6220.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14305 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of PolyLine annotations. By manipulating a document's elements an attacker can cause a pointer to be reused after it has been freed. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6265.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14306 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of button objects. By manipulating a document's elements, an attacker can cause a pointer to be reused after it has been freed. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6266.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14307 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of Link objects. By manipulating a document's elements, an attacker can cause a pointer to be reused after it has been freed. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6267.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14308 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the valueAsString function. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6326.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14309 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the SeedValue Generic Object parameter provided to the signatureSetSeedValue function. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6329.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14310 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of events. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6330.
Problem types: cwe_id: CWE-416
description: CWE-416-Use After Free
Affected products: vendor: Foxit
product: Foxit Reader
Published: 2018-07-31T20:00:00.000Z
CVE-2018-14311 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA events. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6331.
Problem types: cwe_id: CWE-843
description: CWE-843-Access of Resource Using Incompatible Type ('Type Confusion')
Affected products: vendor: Foxit
product: Foxit ActiveX Pro SDK
Published: 2018-07-31T20:00:00.000Z