Exploitation Summary
EIP tracks 5 public exploits for CVE-2018-9948.
PoCs published by Metasploit, mr_me, manojcode, including Metasploit module exploits/windows/fileformat/foxit_reader_uaf.
AI-analyzed exploit summary This Metasploit module exploits a Use-After-Free (UAF) vulnerability in Foxit PDF Reader v9.0.1.1049, combining it with an uninitialized pointer issue to leak memory addresses and execute a ROP chain for arbitrary code execution.
Description
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of typed arrays. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5380.
Exploits (5)
This Metasploit module exploits a Use-After-Free (UAF) vulnerability in Foxit PDF Reader v9.0.1.1049, combining it with an uninitialized pointer issue to leak memory addresses and execute a ROP chain for arbitrary code execution.
This exploit leverages CVE-2018-9958 and CVE-2018-9948 to achieve remote code execution in Foxit Reader 9.0.1.1049 via a use-after-free vulnerability and information disclosure. It uses heap manipulation and ROP chains to execute arbitrary code (e.g., calc.exe).
This is a working exploit PoC for Foxit Reader that leverages CVE-2018-9948 and CVE-2018-9958 to achieve remote code execution via heap spraying and ROP chain manipulation. It includes a custom ROP chain for VirtualAlloc and a Metasploit-generated shellcode to spawn a calculator.
This repository contains a Python script that generates a reverse TCP shellcode using Metasploit's msfvenom, which is intended to be embedded into an exploit PDF for CVE-2018-9948. The script formats the shellcode for use in a JavaScript-based exploit.
This Metasploit module exploits a Use-After-Free (UAF) vulnerability in Foxit PDF Reader v9.0.1.1049, combining it with an uninitialized pointer issue to leak memory addresses and execute a ROP chain for arbitrary code execution.
References (4)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N