Lucene search
+L

5437 matches found

BDU FSTEC
BDU FSTEC
added 2021/03/11 12:00 a.m.8 views

The vulnerability of the resetForm method in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing programs allows a perpetrator to execute arbitrary code.

The vulnerability of the resetForm method in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing programs relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

10CVSS7.5AI score0.04787EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/11 12:00 a.m.11 views

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to memory usage after its release, allows a hacker to execute arbitrary code.

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program lies in the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.04787EPSS
SaveExploits0References4Affected Software2
Tenable Nessus
Tenable Nessus
added 2021/02/19 12:00 a.m.32 views

Foxit Reader < 4.1 PDF Spoofing (macOS)

The version of Foxit Reader for Mac installed on the remote macOS host is prior to 4.1.3. It is, therefore, affected by a PDF spoofing vulnerability. An Evil Annotation Attack may deliver incorrect validation results when validating certain certified PDF files whose visible content was...

7.8CVSS7.8AI score0.02294EPSS
SaveExploits0References2
NCSC
NCSC
added 2021/02/17 12:00 a.m.5 views

Vulnerability fixed in Foxit Reader and Foxit PhantomPDF

Foxit has fixed vulnerabilities in Foxit Reader and Foxit PhantomPDF. A malicious party could potentially exploit it to cause a denial-of-service or execute arbitrary execute arbitrary code with the privileges of the logged-in user. Foxit has released updates to fix the vulnerabilities. For more...

7.8CVSS7.7AI score0.03554EPSS
SaveExploits0
OSV
OSV
added 2021/02/12 12:15 a.m.5 views

CVE-2020-27860

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.5AI score0.03554EPSS
SaveExploits0References2
NVD
NVD
added 2021/02/12 12:15 a.m.21 views

CVE-2020-27860

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS0.03554EPSS
SaveExploits0References2
Prion
Prion
added 2021/02/12 12:15 a.m.16 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS8AI score0.03554EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2021/02/11 11:35 p.m.29 views

CVE-2020-27860

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS8.1AI score0.03554EPSS
SaveExploits0References2
CVE
CVE
added 2021/02/11 11:35 p.m.85 views

CVE-2020-27860

The CVE-2020-27860 entry affects Foxit Reader 10.0.1.35811, with the root cause in the processing of XFA templates due to insufficient validation that can cause a write past the end of an allocated data structure. This can allow remote code execution in the context of the current process, with us...

7.8CVSS8AI score0.03554EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
added 2021/02/11 12:00 a.m.14 views

Foxit Reader 缓冲区错误漏洞

Foxit Reader is a PDF document reader. Foxit Reader suffers from an out-of-bounds write vulnerability that can be exploited by a remote attacker to submit a special file request, which can be tricked into parsing, crashing the application or executing arbitrary code in the application context...

7.8CVSS7.4AI score0.03554EPSS
SaveExploits0References3
OSV
OSV
added 2021/02/10 8:15 p.m.5 views

CVE-2020-13548

In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting...

8.8CVSS7.4AI score0.65804EPSS
SaveExploits1References1
NVD
NVD
added 2021/02/10 8:15 p.m.18 views

CVE-2020-13548

In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting...

8.8CVSS0.65804EPSS
SaveExploits1References1
Prion
Prion
added 2021/02/10 8:15 p.m.21 views

Design/Logic Flaw

In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting...

6.8CVSS8.9AI score0.65804EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/02/10 7:45 p.m.40 views

CVE-2020-13548

In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting...

8CVSS8.9AI score0.65804EPSS
SaveExploits1References1
CVE
CVE
added 2021/02/10 7:45 p.m.86 views

CVE-2020-13548

CVE-2020-13548 – Foxit Reader is affected when a specially crafted PDF (11) triggers reuse of previously freed memory, enabling arbitrary code execution. Affected product/version (per sources): Foxit Reader 10.1.0.37527 (and related Foxit Reader/PhantomPDF components). Attack vector: user must op...

8.8CVSS8.8AI score0.65804EPSS
SaveExploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:00 a.m.12 views

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to data conversion errors, allows a perpetrator to execute arbitrary code.

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program is related to data type conversion errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

9.3CVSS8AI score0.02869EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:00 a.m.14 views

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to memory usage after its release, allows a hacker to execute arbitrary code.

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program lies in the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

9.3CVSS7.8AI score0.65804EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:00 a.m.10 views

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to memory usage after its release, allows a hacker to execute arbitrary code.

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program lies in the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

9.3CVSS8AI score0.70388EPSS
SaveExploits1References4Affected Software2
CNVD
CNVD
added 2021/01/08 12:00 a.m.10 views

Foxit Reader and PhantomPDF Competitive Conditions Vulnerability (CNVD-2021-04402)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker could exploit the vulnerability to cause a stack buffer overflow or an out-of-bounds read...

8.1CVSS7.2AI score0.0084EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/01/08 12:00 a.m.13 views

Foxit Reader and PhantomPDF Competitive Conditions Vulnerability (CNVD-2021-04398)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker could exploit the vulnerability to cause a stack buffer overflow or out-of-bounds read...

8.1CVSS7.2AI score0.00863EPSS
SaveExploits1References1
Rows per page
Query Builder