Lucene search
+L

5419 matches found

CNVD
CNVD
added 2018/10/08 12:0 a.m.7 views

Foxit Reader for Windows Memory Misreference Vulnerability

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of the Calculate event in Foxit Reader 9.2.0.9297 and earlier versions for Windows platforms, where the program fails ...

8.8CVSS8.8AI score0.03814EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/10/08 12:0 a.m.7 views

Foxit Reader for Windows Memory Misreference Vulnerability (CNVD-2018-20654)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of OCG objects in Foxit Reader 9.2.0.9297 and earlier versions for Windows platforms, where the program fails to detec...

8.8CVSS8.8AI score0.03279EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/10/08 12:0 a.m.10 views

Foxit Reader for Windows Memory Misreference Vulnerability (CNVD-2018-20653)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of the Format event in Foxit Reader 9.2.0.9297 and earlier versions for Windows platforms, where the program fails to...

8.8CVSS8.8AI score0.0358EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/10/08 12:0 a.m.9 views

Foxit Reader for Windows Memory Misreference Vulnerability (CNVD-2018-20648)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of the Selection Change event in Foxit Reader 9.2.0.9297 and earlier versions for Windows platforms, where the program...

8.8CVSS8.8AI score0.03279EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/10/08 12:0 a.m.6 views

Foxit Reader and PhantomPDF Information Disclosure Vulnerability (CNVD-2018-20679)

Foxit Reader is a PDF document reader from China's Foxit Software Corporation.Foxit PhantomPDF is a commercial version. Foxit Reader and PhantomPDF 9.3 before the version of the information leakage vulnerability, the vulnerability stems from the program fails to properly create the ArrayBuffer an...

7.5CVSS7.5AI score0.02442EPSS
SaveExploits1References1
Check Point Advisories
Check Point Advisories
added 2018/10/07 12:0 a.m.40 views

Foxit Reader JavaScript XFA Use After Free (CVE-2018-3850)

A use after free vulnerability exists in Foxit Reader. This vulnerability is due to improper handling of freed JavaScript XML Forms Architecture objects...

6.8CVSS0.6AI score0.0287EPSS
SaveExploits1
OSV
OSV
added 2018/10/03 3:29 p.m.7 views

CVE-2018-3967

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the...

7.8CVSS5.8AI score0.06219EPSS
SaveExploits1References2
OSV
OSV
added 2018/10/03 3:29 p.m.3 views

CVE-2018-3993

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the...

8.8CVSS5.8AI score0.03155EPSS
SaveExploits1References3
OSV
OSV
added 2018/10/03 3:29 p.m.3 views

CVE-2018-3995

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user...

8.8CVSS5.8AI score0.02577EPSS
SaveExploits0References3
OSV
OSV
added 2018/10/03 3:29 p.m.7 views

CVE-2018-3964

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the...

7.8CVSS5.8AI score0.09482EPSS
SaveExploits1References2
OSV
OSV
added 2018/10/03 3:29 p.m.4 views

CVE-2018-3946

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user ...

8.8CVSS5.8AI score0.03155EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2018/10/03 12:0 a.m.6 views

PT-2018-16348 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader version 9.1.0.5096 Description: An exploitable use-after-free issue exists in the JavaScript engine of Foxit Software's Foxit PDF Reader. A specially crafted PDF document can trigger a previously freed object in memory to be...

8CVSS7.8AI score0.06219EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2018/10/03 12:0 a.m.9 views

PT-2018-16347 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader version 9.1.0.5096 Description: A use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader. This issue can be triggered by a specially crafted PDF document, allowing a previously freed object in memory...

8CVSS7.9AI score0.06043EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2018/10/03 12:0 a.m.33 views

Foxit Reader < 9.3 Multiple Vulnerabilities - Windows

Foxit Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:foxitsoftware:reader";...

9.8CVSS8.2AI score0.03197EPSS
SaveExploits11References2
OSV
OSV
added 2018/10/02 9:29 p.m.3 views

CVE-2018-3944

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user...

8.8CVSS5.8AI score0.02577EPSS
SaveExploits0References3
ThreatPost
ThreatPost
added 2018/10/02 9:19 p.m.39 views

Foxit PDF Reader Fixes High-Severity Remote Code Execution Flaws

Foxit Software has patched over 100 vulnerabilities in its popular Foxit PDF Reader. Many of the bugs tackled by the company include a wide array of high severity remote code execution vulnerabilities. Foxit on Friday released fixes for Foxit Reader 9.3 and Foxit PhantomPDF 9.3, which addressed a...

6.8CVSS0.1AI score0.09482EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2018/10/02 12:0 a.m.6 views

PT-2018-16342 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader version 9.1.0.5096 Description: A use-after-free issue exists in the JavaScript engine. This can occur when accessing the Author property of the this.info object. An attacker can trigger this by tricking a user into opening a...

8CVSS7.5AI score0.02361EPSS
SaveExploits0References3
Check Point Advisories
Check Point Advisories
added 2018/10/02 12:0 a.m.91 views

Foxit Reader and PhantomPDF Multiple Use After Free Vulnerabilities (CVE-2018-3940; CVE-2018-3941; CVE-2018-3942; CVE-2018-3943; CVE-2018-3944; CVE-2018-3945; CVE-2018-3946)

A remote code execution vulnerability exists in Foxit Reader and PhantomPDF. The vulnerability is due to a use-after-free error while handling a specially crafted PDF file. Successful exploitation could lead to arbitrary code execution. Additional CVEs: CVE-2018-3957, CVE-2018-3958, CVE-2018-3959...

6.8CVSS8.6AI score0.09482EPSS
SaveExploits15
Positive Technologies
Positive Technologies
added 2018/10/02 12:0 a.m.4 views

PT-2018-16336 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit Software's PDF Reader version 9.1.0.5096 Description: A use-after-free issue in the JavaScript engine of Foxit Software's PDF Reader can be exploited by opening a specially crafted PDF document, potentially leading to arbitrary code...

8.8CVSS7.9AI score0.02577EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2018/10/02 12:0 a.m.10 views

PT-2018-16344 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader version 9.1.0.5096 Description: A use-after-free issue exists in the JavaScript engine. This can occur when accessing the Creator property of the this.info object. An attacker can trigger this issue by tricking a user into...

8CVSS7.5AI score0.02361EPSS
SaveExploits0References3
Rows per page
Query Builder