Security readout for executives and security teams
Plain-English summary
This CVE describes a crash vulnerability in Foxit Reader 9.3.0.10826. A specially crafted TIFF-related input can cause FoxitReader.exe to stop working, creating a denial-of-service condition for the user. The supplied sources do not show code execution, data theft, a CVSS score, or active exploitation.
Executive priority
Handle as a targeted availability risk, not a confirmed breach-enabling issue. Prioritize if Foxit Reader 9.3.0.10826 is present in document-heavy or externally exposed workflows. Otherwise, fold into normal desktop application patch hygiene.
Technical view
FoxitReader.exe in Foxit Reader 9.3.0.10826 can hit a break-instruction exception and application crash when handling TIFF data. The reported fault is associated with ConvertToPDF_x86 and ConnectedPDFSDK FCP_SendEmailNotification. Public metadata does not provide CWE, CVSS, CPEs, or a named fixed version.
Likely exposure
Exposure appears limited to systems running Foxit Reader 9.3.0.10826, especially where users open or convert TIFF content from external sources. The source bundle lacks structured CPE data, so validation depends on endpoint software inventory and observed application behavior.
Exploitation context
The CVE text says remote attackers can cause denial of service via TIFF data. CISA KEV is false in the provided bundle, and no cited source confirms active exploitation. Treat exploitation status as unconfirmed beyond public proof/report references.
Researcher notes
The public record is thin: no CVSS, CWE, affected CPE, or vendor fix is provided in the bundle. Analysis should avoid expanding impact beyond application crash denial of service unless additional vendor or reproducible technical evidence is obtained.
Mitigation direction
- Inventory endpoints running Foxit Reader 9.3.0.10826.
- Check Foxit vendor guidance or release notes for fixed versions.
- Prefer vendor-supported upgrades where operationally feasible.
- Restrict handling of untrusted TIFF files in Foxit Reader where possible.
- Monitor FoxitReader.exe crash telemetry for related activity.
Validation and detection
- Confirm installed Foxit Reader versions across managed endpoints.
- Identify users or workflows that process TIFF content in Foxit Reader.
- Review endpoint logs for FoxitReader.exe crashes after TIFF handling.
- Track CVE Program and vendor information for updated severity or fixes.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2018-19390 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/20/2018/11/2018-11-20/index.htmlCVE reference · x_refsource_MISC
- https://yan-1-20.github.io/2018/11/20/2018/11/2018-11-20/CVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.