5437 matches found
Foxit Reader Remote Code Execution Vulnerability (CNVD-2020-62462)
Foxit Reader is a PDF document reader. A remote code execution vulnerability exists in the parsing of JPEG2000 images in Foxit Reader 10.0.1.35811 and earlier versions. The vulnerability stems from improper validation of user-supplied data. An attacker can exploit the vulnerability to execute cod...
Denial of Service Vulnerability in Foxit PDF Reader
Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. A denial of service vulnerability exists in Foxit Reader, which can be exploited by attackers to cause a denial of service...
Foxit Reader Remote Code Execution Vulnerability (CNVD-2020-62463)
Foxit Reader is a PDF document reader. A remote code execution vulnerability exists in the handling of annotated objects in Foxit Reader 10.0.1.35811 and earlier versions. The vulnerability stems from a failure to verify the existence of an object before performing an operation on it. An attacker...
Foxit Reader JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPEG20...
Vulnerabilities fixed in Foxit Reader and Foxit PhantomPDF
Vulnerabilities have been fixed in Foxit Reader and Foxit PhantomPDF. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service DoS Remote code execution User Rights Access to system data Increased user privileges Foxit has...
Foxit Reader Update Service Incorrect Permission Assignment Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Foxit Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the...
Foxit Reader AcroForm Annotation Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...
KLA11968 Multiple vulnerabilities in Foxit Reader
Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to . Below is a complete list of vulnerabilities: 1. Out of bounds read vulnerability can be exploited remotely to execute arbitrary code and cause denial of service. 2. Elevation of privilege...
Foxit Reader and PhantomPDF Data Forgery Issue Vulnerability
Foxit Reader is a PDF document reader.PhantomPDF is a PDF editor. A security vulnerability exists in Foxit Reader and PhantomPDF versions prior to 10.0.1 and prior to 9.7.3, which can be exploited by attackers to obtain sensitive information...
Foxit Reader and PhantomPDF Buffer Overflow Vulnerability (CNVD-2020-65176)
Foxit Reader is a PDF document reader.PhantomPDF is a PDF editor. A buffer error vulnerability exists in Foxit Reader and PhantomPDF versions prior to 10.0.1 and prior to 9.7.3, which arises from a networked system or product that performs an operation in memory without properly validating the da...
Foxit Reader and PhantomPDF heap buffer overflow vulnerability (CNVD-2020-62465)
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. Foxit Reader and PhantomPDF heap buffer overflow vulnerability. The vulnerability stems from improper handling of dirty image resource data. An attacker can exploit this vulnerability to execute arbitrar...
CVE-2020-12247
In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information from an out-of-bounds read because a text-string index continues to be used after splitting a string into two parts. A crash may also occur...
CVE-2020-11493
In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information about an uninitialized object because of direct transformation from PDF Object to Stream without concern for a crafted XObject...
CVE-2020-12247
In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information from an out-of-bounds read because a text-string index continues to be used after splitting a string into two parts. A crash may also occur...
CVE-2020-11493
In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information about an uninitialized object because of direct transformation from PDF Object to Stream without concern for a crafted XObject...
CVE-2020-12248
In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can execute arbitrary code via a heap-based buffer overflow because dirty image-resource data is mishandled...
Heap overflow
In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can execute arbitrary code via a heap-based buffer overflow because dirty image-resource data is mishandled...
Out-of-bounds
In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information from an out-of-bounds read because a text-string index continues to be used after splitting a string into two parts. A crash may also occur...
CVE-2020-12248
CVE-2020-12248 affects Foxit Reader and Foxit PhantomPDF: heap-based buffer overflow caused by mishandling dirty image-resource data, allowing arbitrary code execution. Affected: Foxit Reader and PhantomPDF versions before 10.0.1, and PhantomPDF before 9.7.3. Impact per sources: potential remote ...
