CVE-2018-3843 is a high-severity type confusion vulnerability in Foxit PDF Reader version 9.0.1.1049, specifically affecting how it parses files with associated annotations. This vulnerability can be triggered by a specially crafted PDF document, leading to sensitive memory disclosure and potentially arbitrary code execution. The attack requires user interaction, either by opening a malicious file or visiting a malicious website if the browser plugin is enabled. While it has a high CVSS score of 8.8 and significant community discussion, there is currently no public exploit code available, and it is not listed on the KEV catalog.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
9.0.1.1049CPE matchmatch criteria | cpe:2.3:a:foxitsoftware:foxit_reader:9.0.1.1049:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.
Remediation records are not available for this CVE.