Denial of Service and Information Disclosure in Foxit Reader u3d Plugin

CVE-2018-19343

Summary

The u3d plugin in Foxit Reader, specifically version 9.3.0.10809, is susceptible to vulnerabilities that allow remote attackers to trigger a denial of service through an out-of-bounds read. This flaw may lead to the exposure of sensitive information or create other unspecified effects when malicious U3D samples are processed. The underlying issue relates to how data from faulting addresses controls code execution flow, impacting the stability and security of the application.

References