Lucene search
+L

5437 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/05/07 12:00 a.m.46 views

Foxit Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

3.3CVSS2AI score0.02018EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/05/07 12:00 a.m.37 views

Foxit Reader XFA leadDigits Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7.8CVSS3.4AI score0.02511EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/05/07 12:00 a.m.11 views

Foxit Reader 资源管理错误漏洞

Foxit Reader old name: Foxit PDF Reader is a set of software used to read PDF format files, by Fujian Foxit Software developed by Foxit Reader is a set of free to use the software, the operating system is mainly based on Microsoft Windows, and as long as there is a Win32 implementation of the...

7.8CVSS6.3AI score0.02778EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2021/05/07 12:00 a.m.42 views

Foxit Reader XFA Form Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...

7.8CVSS1.9AI score0.02933EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/05/07 12:00 a.m.10 views

Foxit Reader 资源管理错误漏洞

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A reuse-after-release remote code execution vulnerability exists in Foxit Reader Annotation. The vulnerability stems from not verifying the existence of an object before performing an operation on it. An attacker can exploit...

7.8CVSS6.5AI score0.02755EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/05/07 12:00 a.m.11 views

Foxit Reader 安全漏洞

Foxit Reader old name: Foxit PDF Reader is a set of software used to read PDF format files, by Fujian Foxit Software developed by Foxit Reader is a set of free to use the software, the operating system is mainly based on Microsoft Windows, and as long as there is a Win32 implementation of the...

7.8CVSS6.9AI score0.02511EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2021/05/07 12:00 a.m.45 views

Foxit Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D...

7.8CVSS3.9AI score0.02819EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/05/07 12:00 a.m.8 views

Foxit Reader 缓冲区错误漏洞

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A security vulnerability exists in Foxit Reader U3D file parsing, which stems from the lack of proper validation of user-supplied data, which could lead to reading more than the end of an allocated object. An attacker can...

4.3CVSS6.1AI score0.02018EPSS
SaveExploits0References3
Kaspersky
Kaspersky
added 2021/05/06 12:00 a.m.65 views

KLA12166 Multiple vulnerabilities in Foxit Reader

Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A use after free vulnerability can be exploited remotely via...

8.8CVSS9.5AI score0.05589EPSS
SaveExploits2References4
Talos
Talos
added 2021/05/06 12:00 a.m.200 views

Foxit Reader FileAttachment annotation use-after-free vulnerability

Summary A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A specially crafted PDF document can trigger the reuse of previously free memory, which can lead to arbitrary code execution. An attacker needs to trick the user into openi...

8.8CVSS8.9AI score0.01765EPSS
SaveExploits1
CNNVD
CNNVD
added 2021/05/06 12:00 a.m.17 views

Foxit Reader for Windows 资源管理错误漏洞

Foxit Reader for Windows is a Windows-based PDF document reader from the Chinese company Foxit. Foxit Reader for Windows suffers from a resource management error vulnerability that originates from an error when handling certain XFA forms or annotation objects. A remote attacker could exploit the...

8.8CVSS7.9AI score0.01765EPSS
SaveExploits1References3
Kaspersky
Kaspersky
added 2021/05/06 12:00 a.m.66 views

KLA12191 Buffer overflow vulnerability in Foxit Reader

A buffer overflow vulnerability was found in Foxit Reader. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories Foxit Security Bulletins Related products Foxit-Reader CVE list CVE-2021-31476 critical Solution Update to the latest...

7.8CVSS8.5AI score0.06379EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2021/03/22 12:00 a.m.31 views

Foxit Reader < 10.1.3 RCE

According to its version, the Foxit Reader application installed on the remote Windows host is prior to 10.1.3. It is, therefore affected by an out-of-bounds read vulnerability, which can be exploited to cause remote code execution. Note that Nessus has not tested for this issue but has instead...

7.8CVSS7.3AI score0.02692EPSS
SaveExploits0References2
Kaspersky
Kaspersky
added 2021/03/22 12:00 a.m.59 views

KLA12126 ACE vulnerability in Foxit Reader

An out of bounds read vulnerability was found in Foxit Reader. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Foxit Security Bulletins Related products Foxit-Reader CVE list CVE-2021-27270 critical Solution Update to the latest version Download Foxit...

7.8CVSS8.2AI score0.02692EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/03/11 12:00 a.m.10 views

The vulnerability affects the implementation of the OCRAndExportToExcel function in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing software. This allows an attacker to execute arbitrary code.

The vulnerability of the OCRAndExportToExcel implementation in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing programs is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

10CVSS7.6AI score0.06602EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/11 12:00 a.m.7 views

The vulnerability affects the implementation of the “AddWatermark” command in the Foxit Reader text viewer software and the Foxit PhantomPDF PDF editing software. This allows a malicious individual to execute arbitrary code.

The vulnerability of the “AddWatermark” command in the Foxit Reader text viewer and the Foxit PhantomPDF PDF editing program is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

10CVSS7.6AI score0.04689EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/11 12:00 a.m.16 views

The vulnerability affects the implementation of the RotatePage command in the Foxit Reader text viewer and the Foxit PhantomPDF PDF editing program. This allows an attacker to execute arbitrary code.

The vulnerability of the RotatePage function in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing software lies in data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

10CVSS7.6AI score0.04787EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/11 12:00 a.m.10 views

The vulnerability of the SetFieldValue command implementation in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing program allows a perpetrator to execute arbitrary code.

The vulnerability of the GetFieldValue function implementation in programs for displaying text in Foxit Reader and editing PDF files in Foxit PhantomPDF is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

10CVSS7.6AI score0.04689EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/11 12:00 a.m.8 views

The vulnerability of the GetFieldValue function implementation in the program for displaying text in Foxit Reader and the PDF editing program Foxit PhantomPDF allows a perpetrator to execute arbitrary code.

The vulnerability of the GetFieldValue function implementation in programs for displaying text in Foxit Reader and editing PDF files in Foxit PhantomPDF is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

10CVSS7.6AI score0.04689EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/11 12:00 a.m.8 views

The vulnerability affects the implementation of the “Export” command in the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program. This allows a malicious individual to execute arbitrary code.

The vulnerability of the “Export” command in the Foxit Reader text viewer and the Foxit PhantomPDF PDF editing program is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

10CVSS7.6AI score0.04689EPSS
SaveExploits0References4Affected Software2
Rows per page
Query Builder