Denial of Service Vulnerability in Multiple Foxit Products

Foxit Reader is a Chinese Foxit Foxit software company's a PDF document reader.Enterprise Reader is a customized version of the enterprise.PhantomPDF is a commercial version. A security vulnerability exists in several Foxit products. A remote attacker could exploit this vulnerability to cause a...

CVE-2015-2790

Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service memory corruption and crash via a crafted 1 Ubyte Size in a DataSubBlock structure or 2 LZWMinimumCodeSize in a GIF image...

CVE-2015-2789

Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder...

Design/Logic Flaw

Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder...

Memory corruption

Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service memory corruption and crash via a crafted 1 Ubyte Size in a DataSubBlock structure or 2 LZWMinimumCodeSize in a GIF image...

CVE-2015-2790

CVE-2015-2790 affects Foxit Reader, Foxit Enterprise Reader, and Foxit PhantomPDF prior to 7.1. The issue is a denial-of-service caused by memory corruption triggered by a crafted GIF image, specifically via (1) Ubyte Size in a DataSubBlock or (2) LZWMinimumCodeSize. OpenVAS/Nessus entries confir...

CVE-2015-2789

Summary : CVE-2015-2789 is an unquoted Windows search path vulnerability in Foxit Reader’s Cloud plugin (Foxit Cloud Safe Update Service) affecting Foxit Reader 6.1–7.0.6.1126. This local privilege-escalation flaw can allow a non-privileged, local attacker to gain elevated privileges via a Trojan...

CVE-2015-2789

Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder...

KLA10517 Privilege escalation in Foxit Reader

Search path vulnerability was found in Foxit Reader Cloud plugin. By exploiting this vulnerability malicious users gain privileges. This vulnerability can be exploited locally via files manipulation. Original advisories Foxit bulletins Exploitation Public exploits exist for this vulnerability...

KLA10513 Denial of service vulnerability in Foxit products

An unspecified vulnerability was found in Foxit products. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed GIF image. Original advisories Foxit bulletins Exploitation Public exploits exist for this...

Foxit Reader 7.0.6.1126 - Unquoted Service Path Elevation Of Privilege

Exploit for windows platform in category local exploits Foxit Reader 7.0.6.1126 Unquoted Service Path Elevation Of Privilege Vendor: Foxit Software Incorporated Product web page: http://www.foxitsoftware.com Affected version: 7.0.6.1126 and 6.1 Summary: Foxit Reader is a small, lightning fast, an...

Foxit Reader 7.0.6.1126 - Unquoted Service Path Privilege Escalation

Foxit Reader 7.0.6.1126 - Unquoted Service Path Privilege Escalation Foxit Reader 7.0.6.1126 Unquoted Service Path Elevation Of Privilege Vendor: Foxit Software Incorporated Product web page: http://www.foxitsoftware.com Affected version: 7.0.6.1126 and 6.1 Summary: Foxit Reader is a small,...

Foxit Reader 7.0.6.1126 Privilege Escalation

Foxit Reader 7.0.6.1126 Unquoted Service Path Elevation Of Privilege Vendor: Foxit Software Incorporated Product web page: http://www.foxitsoftware.com Affected version: 7.0.6.1126 and 6.1 Summary: Foxit Reader is a small, lightning fast, and feature rich PDF viewer which allows you to create...

Foxit Reader 7.0.6.1126 - Unquoted Service Path Privilege Escalation

Foxit Reader 7.0.6.1126 Unquoted Service Path Elevation Of Privilege Vendor: Foxit Software Incorporated Product web page: http://www.foxitsoftware.com Affected version: 7.0.6.1126 and 6.1 Summary: Foxit Reader is a small, lightning fast, and feature rich PDF viewer which allows you to create...

Foxit Reader 7.0.6.1126 Unquoted Service Path Elevation Of Privilege

Summary Foxit Reader is a small, lightning fast, and feature rich PDF viewer which allows you to create free PDF creation, open, view, sign, and print any PDF file. Description The application suffers from an unquoted search path issue impacting the service 'FoxitCloudUpdateService' for Windows...

Foxit Reader GIF File LZWMinimumCodeSize Memory Corruption Vulnerability

Foxit Reader is a popular application for working with PDF files. A memory corruption vulnerability exists in Foxit Reader's handling of GIF files containing the specially crafted LZWMinimumCodeSize, which allows an attacker to exploit the vulnerability to construct a malicious file and trick the...

Foxit Reader Update Service Insecure Service Path Elevation of Privilege Vulnerability

Foxit Reader is a popular application for working with PDF files. A security vulnerability in the Foxit Reader update service allows an attacker to exploit a special executable to trick the update service into executing a file due to the program's failure to properly handle the service path...

Foxit Reader GIF File Ubyte Byte Handling Memory Corruption Vulnerability

Foxit Reader is a popular application for working with PDF files. A memory corruption vulnerability exists in Foxit Reader's handling of GIF files containing specially crafted Ubyte-sized GIFs, which can be exploited by attackers to construct malicious files that can be parsed by the user, causin...

Foxit Products GIF Conversion - LZWMinimumCodeSize Memory Corruption

Foxit Products GIF Conversion - LZWMinimumCodeSize Memory Corruption Application: Foxit Products GIF Conversion Memory Corruption Vulnerabilities LZWMinimumCodeSize Platforms: Windows Versions: The vulnerability is confirmed in version Foxit Reader 7.x. Other versions may also be affected. Secuni...

Foxit Products GIF Conversion - 'LZWMinimumCodeSize' Memory Corruption

Application: Foxit Products GIF Conversion Memory Corruption Vulnerabilities LZWMinimumCodeSize Platforms: Windows Versions: The vulnerability is confirmed in version Foxit Reader 7.x. Other versions may also be affected. Secunia: SA63346 PRL: 2015-01 Author: Francis Provencher Protek Research...