High severity7.8NVD Advisory· Published Jun 7, 2019· Updated Jun 17, 2026
CVE-2018-19452
CVE-2018-19452
Description
A use after free in the TextBox field Mouse Enter action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19444, this has a different free location and requires different JavaScript code for exploitation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:foxitsoftware:foxit_pdf_sdk_activex:*:*:*:*:professional:*:*:*Range: <=5.5.0
- Foxit/Foxit Reader SDK (ActiveX) Professionaldescription
- Range: 5.4.0.1031
Patches
Vulnerability mechanics
References
2- www.foxitsoftware.com/support/security-bulletins.phpnvdPatchVendor Advisory
- www.securityfocus.com/bid/108692nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.