CVE-2014-8074: Foxitsoftware Foxit PDF SDK Activex

Medium severity, CVSS 6.8. EPSS: 3.7% chance of exploitation in the next 30 days.

Buffer overflow in the SetLogFile method in Foxit.FoxitPDFSDKProCtrl.5 in Foxit PDF SDK ActiveX 2.3 through 5.0.1820 before 5.0.2.924 allows remote attackers to execute arbitrary code via a long string, related to global variables.

Affected products

• Foxitsoftware Foxit PDF SDK Activex: version 2.3 only; version 3.0 only; version 4.0 only; version 5.0.0 only; version 5.0.1.820 only

Published 2014-10-17. Last modified 2026-06-17.