5441 matches found
CVE-2018-5674
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...
CVE-2018-5674
Foxit Reader/PhantomPDF before 9.1 are vulnerable to CVE-2018-5674 due to improper handling of PDF files with embedded u3d images. The flaw triggers a heap-based buffer overflow when parsing specially crafted PDFs, allowing remote code execution in the context of the current process. Exploitation...
CVE-2018-5677
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...
CVE-2018-5676
Foxit PhantomPDF/Reader vuln CVE-2018-5676: affected if app is before 9.1; parsing of PDF with embedded u3d images can overflow a heap-based buffer, enabling arbitrary code execution. Requires user interaction (open malicious PDF/page or visit malicious page). Impact described as code execution u...
CVE-2018-5675
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...
CVE-2018-5675
CVE-2018-5675 affects Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1. The flaw occurs in the processing of PDF files with embedded u3d images, where crafted data can trigger an out-of-bounds write in a buffer, allowing remote code execution under the current process. An attacker must ent...
CVE-2018-5678
Foxit Reader/PhantomPDF before 9.1 are affected by CVE-2018-5678 due to a flaw in processing PDFs with embedded u3d images, causing a heap-based buffer overflow. An attacker can exploit this via a malicious PDF to execute arbitrary code in the current process; user interaction is required (visiti...
CVE-2018-5679
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...
CVE-2018-5674
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...
CVE-2018-5677
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...
CVE-2018-5678
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...
CVE-2018-5677
Foxit Reader/PhantomPDF prior to 9.1 are affected by CVE-2018-5677 due to improper validation when processing PDF files containing embedded u3d images, enabling remote code execution. Exploitation requires user to open a malicious file/page. The issue is fixed in 9.1 or later. Newer products are ...
CVE-2018-5679
CVE-2018-5679 affects Foxit Reader and Foxit PhantomPDF prior to 9.1. The flaw is in processing of PDF files with embedded u3d images due to insufficient validation, causing a read past end of an allocated object and enabling arbitrary code execution in the current process. The issue is exploitab...
CVE-2018-7406
An issue was discovered in Foxit Reader before 9.1 and PhantomPDF before 9.1. This vulnerability allows remote attackers to execute arbitrary code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...
CVE-2018-5680
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...
CVE-2018-7407
An issue was discovered in Foxit Reader before 9.1 and PhantomPDF before 9.1. This vulnerability allows remote attackers to execute arbitrary code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...
Foxit Reader Arbitrary Code Execution Vulnerability (CNVD-2018-10549)
Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A remote code execution vulnerability exists in the parsing of U3D files in Foxit Reader version 9.0.0.29935, where the program fails to properly initialize a pointer before accessing it. A remote attacker can exploi...
Foxit Reader Information Disclosure Vulnerability (CNVD-2018-10548)
Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A security vulnerability exists in the parsing of the Texture Image Channels object in Foxit Reader version 9.0.0.29935, which is caused by the program failing to properly validate user-submitted data. The...
Foxit Reader Information Disclosure Vulnerability (CNVD-2018-10567)
Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. An out-of-bounds reading vulnerability exists in the parsing of U3D files embedded in PDF documents in Foxit Reader version 9.0.0.29935, where the program fails to properly validate user-submitted data. The...
Foxit Reader Out-of-Bounds Read Vulnerability
Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. An out-of-bounds reading vulnerability exists in the parsing of U3D files in Foxit Reader version 9.0.0.29935, which occurs when the program fails to properly validate user-submitted data. The vulnerability can be...