VulnerabilityModified
CVE-2014-8074
Buffer overflow in the SetLogFile method in Foxit.FoxitPDFSDKProCtrl.5 in Foxit PDF SDK ActiveX 2.3 through 5.0.1820 before 5.0.2.924 allows remote attackers to execute arbitrary code via a long string, related to global variables.
MEDIUM 6.8EPSS 3.72%
Does this matter?
Lower severity and a low EPSS score (3.72%). Track it; it rarely justifies an emergency change on its own.
Description
Buffer overflow in the SetLogFile method in Foxit.FoxitPDFSDKProCtrl.5 in Foxit PDF SDK ActiveX 2.3 through 5.0.1820 before 5.0.2.924 allows remote attackers to execute arbitrary code via a long string, related to global variables.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 3.72% probability · 89th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- foxitsoftware/foxit pdf sdk activex
- Source
- cve@mitre.org
References
- http://www.foxitsoftware.com/support/security_bulletins.php#FRD-22Vendor Advisory
- http://www.securityfocus.com/bid/70608
- http://www.zerodayinitiative.com/advisories/ZDI-14-362/
- http://www.foxitsoftware.com/support/security_bulletins.php#FRD-22Vendor Advisory
- http://www.securityfocus.com/bid/70608
- http://www.zerodayinitiative.com/advisories/ZDI-14-362/
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.