CVE-2018-9948

This is a working exploit PoC for Foxit Reader that leverages CVE-2018-9948 and CVE-2018-9958 to achieve remote code execution via heap spraying and ROP chain manipulation. It includes a custom ROP chain for VirtualAlloc and a Metasploit-generated shellcode to spawn a calculator.

This repository contains a Python script that generates a reverse TCP shellcode using Metasploit's msfvenom, which is intended to be embedded into an exploit PDF for CVE-2018-9948. The script formats the shellcode for use in a JavaScript-based exploit.

This Metasploit module exploits a Use-After-Free (UAF) vulnerability in Foxit PDF Reader v9.0.1.1049, combining it with an uninitialized pointer issue to leak memory addresses and execute a ROP chain for arbitrary code execution.

This exploit leverages CVE-2018-9958 and CVE-2018-9948 to achieve remote code execution in Foxit Reader 9.0.1.1049 via a use-after-free vulnerability and information disclosure. It uses heap manipulation and ROP chains to execute arbitrary code (e.g., calc.exe).

This Metasploit module exploits a Use-After-Free (UAF) vulnerability in Foxit PDF Reader v9.0.1.1049, combining it with an uninitialized pointer issue to leak memory addresses and execute a ROP chain for arbitrary code execution.