CVE-2024-30371

CVE-2024-30371 affects Foxit PDF Reader (and related Foxit PDF Editor/PhantomPDF lineage) with an AcroForm Use-After-Free remote code execution. The root cause is failure to validate the existence of an object before performing operations on it within AcroForms, enabling an attacker to execute co...

CVE-2024-30370

CVE-2024-30370 concerns WinRAR. The flaw resides in the archive extraction logic that can bypass Mark‑Of‑The‑Web protection via a crafted archive entry, potentially enabling arbitrary file creation and, with other issues, code execution in the current user’s context. Exploitation requires user in...

CVE-2024-30367 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

CVE-2024-30367 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

CVE-2024-30365 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

CVE-2024-30365 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

CVE-2024-30365

CVE-2024-30365 affects Foxit PDF Reader/Editor (AcroForm Use-After-Free) with the flaw in AcroForms object handling: it does not validate object existence before operations, enabling arbitrary code execution in the current process after user opens a malicious file/page. The entry references ZDI-C...

CVE-2024-30364 Foxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Foxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must...

CVE-2024-30363 Foxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Foxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must...

CVE-2024-30363

CVE-2024-30363 affects Foxit PDF Reader (U3D File Parsing) and related Foxit components. The issue is an out-of-bounds read caused by inadequate validation of U3D data during parsing, leading to potential information disclosure and, in combination with other flaws, possible code execution in the ...

CVE-2024-30362 Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability

Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2024-30362

Foxit PDF Editor/Reader (Windows; Mac notes appear in related Nessus/OpenVAS listings) is affected by a Use-After-Free vulnerability in object handling within PDF processing (AcroForm, Doc objects). The flaw stems from not validating the existence of an object before performing operations on it, ...

CVE-2024-30362 Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability

Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2024-30361 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

CVE-2024-30361

CVE-2024-30361 is a Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution vulnerability. Root cause: object existence is not validated before operations on AcroForm objects, allowing code execution in the app process. Exploitation requires user interaction (visiting malicious page or ope...

CVE-2024-30360

CVE-2024-30360 affects Foxit PDF Reader (AcroForm handling). Root cause: Use-After-Free due to not validating object existence before operations, enabling remote code execution when a user opens a malicious file/page. Exploitation requires user interaction; exploitability is indicated as high imp...

CVE-2024-30360 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

CVE-2024-30359 Foxit PDF Reader AcroForm 3D Out-Of-Bounds Read Remote Code Execution Vulnerability

Foxit PDF Reader AcroForm 3D Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2024-30359

CVE-2024-30359 describes a remote code execution vulnerability in Foxit PDF Reader related to AcroForm 3D objects. The flaw arises from insufficient validation of user-supplied data when handling 3D AcroForm objects, allowing an out-of-bounds read that can lead to code execution in the context of...

CVE-2024-30359 Foxit PDF Reader AcroForm 3D Out-Of-Bounds Read Remote Code Execution Vulnerability

Foxit PDF Reader AcroForm 3D Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...