KLA12317 Multiple vulnerabilities in Foxit Reader

🗓️ 12 Oct 2021 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 54 Views

Multiple vulnerabilities in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, and cause denial of servic

Reporter	Title	Published	Views	Family All 379
BDU FSTEC	The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to the execution of operations outside the buffer in memory, allows attackers to execute arbitrary code.	20 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to the execution of operations outside the buffer in memory, allows attackers to execute arbitrary code.	20 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to errors in verifying cryptographic signatures, allows a perpetrator to circumvent existing security restrictions.	21 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to the execution of operations outside the buffer in memory, allows attackers to execute arbitrary code.	10 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to the execution of operations outside the buffer in memory, allows attackers to execute arbitrary code.	11 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to the execution of operations outside the buffer in memory, allows attackers to execute arbitrary code.	11 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to the execution of operations outside the buffer in memory, allows attackers to execute arbitrary code.	17 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the PDF editing software Foxit PhantomPDF and the text viewing software Foxit Reader for Windows operating systems arises from allowing operations beyond the buffer boundaries in memory, enabling attackers to execute arbitrary code.	16 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability relates to the implementation of the transitionToState method in the Foxit PhantomPDF PDF editing software and the Foxit Reader text viewing software for Windows operating systems. This vulnerability allows an attacker to execute arbitrary code.	16 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the PDF editing software Foxit PhantomPDF and the text viewing software Foxit Reader for Windows operating systems arises from allowing operations beyond the buffer boundaries in memory, enabling attackers to execute arbitrary code.	16 Dec 202100:00	–	bdu_fstec

Source	Link
foxit	www.foxit.com/support/security-bulletins.html
threats	www.threats.kaspersky.com/en/product/Foxit-Reader/
statistics	www.statistics.securelist.com/

31 Mar 2025 00:00Current

9.1High risk

Vulners AI Score9.1

CVSS 37.8

CVSS 3.17.8

EPSS0.01253

SSVC