[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248364

 
 

909

 
 

195388

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2014-8074Date: (C)2014-10-23   (M)2023-12-22


Buffer overflow in the SetLogFile method in Foxit.FoxitPDFSDKProCtrl.5 in Foxit PDF SDK ActiveX 2.3 through 5.0.1820 before 5.0.2.924 allows remote attackers to execute arbitrary code via a long string, related to global variables.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 6.8
Exploit Score: 8.6
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
BID-70608
http://www.foxitsoftware.com/support/security_bulletins.php#FRD-22
http://www.zerodayinitiative.com/advisories/ZDI-14-362/

CPE    5
cpe:/a:foxitsoftware:foxit_pdf_sdk_activex:5.0.1.820
cpe:/a:foxitsoftware:foxit_pdf_sdk_activex:4.0
cpe:/a:foxitsoftware:foxit_pdf_sdk_activex:2.3
cpe:/a:foxitsoftware:foxit_pdf_sdk_activex:5.0.0
...
CWE    1
CWE-119

© SecPod Technologies