CVE-2018-21242: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows Remote Code Execution via a GoToE or GoToR action...

PT-2020-8883

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.2 PhantomPDF versions prior to 9.2 Description An issue was discovered that allows NTLM credential theft via a GoToE or GoToR action. Recommendations For Foxit Reader versions prior to 9.2, update to version 9....

PT-2020-8881

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.7 Description The issue allows NTLM credential theft via a GoToE or GoToR action. Recommendations For Foxit PhantomPDF versions prior to 8.3.7, update to version 8.3.7 or later to resolve the issue...

PT-2020-8886

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.6 Description An issue in Foxit PhantomPDF allows Remote Code Execution via a GoToE or GoToR action. Recommendations For versions prior to 8.3.6, update to version 8.3.6 or later to resolve the issue...

CVE-2018-21237: Insufficiently Protected Credentials

An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows NTLM credential theft via a GoToE or GoToR action...

Adobe Acrobat and Reader Information Disclosure (APSB15-15: CVE-2014-8450)

An Information Disclosure vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to the support of PDF standard in GotoE and GotoR actions that can be used to navigate to either an embedded resource GotoE or external resource GotoR without user interaction. Attacker...