Command Injection Vulnerability in Foxit Reader SDK by Foxit Software
CVE-2018-19445
7.8HIGH
What is CVE-2018-19445?
A command injection vulnerability exists in the Foxit Reader SDK (ActiveX) Professional 5.4.0.1031, specifically triggered by the JavaScript API app.launchURL when processing specially crafted PDF files. This flaw allows attackers to execute arbitrary commands remotely, potentially compromising system integrity and data security.