CVE-2020-17428

Foxit Studio Photo CMP file parsing vulnerability (CVE-2020-17428) allows information disclosure via a CMP data handling flaw that can read past the end of an allocated structure. Evidence from ZDI-20-1339 confirms an out-of-bounds read, enabling leakage when a user visits a malicious page or ope...

CVE-2020-17429

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-17427

Foxit Studio Photo 3.6.6.922 is affected by CVE-2020-17427, due to an out-of-bounds read in NEF file processing caused by insufficient validation of user-supplied data. The vulnerability allows remote code execution and requires user interaction (the target must visit a malicious page or open a m...

CVE-2020-17426

CVE-2020-17426 affects Foxit Studio Photo 3.6.6.922 and earlier, where the vulnerability lies in handling CR2 files. The issue stems from insufficient validation of user-supplied data during CR2 file parsing, leading to a memory corruption condition. Exploitation requires user interaction (target...

CVE-2020-17424

Foxit Studio Photo 3.6.6.922 and earlier are affected by an EZI file parsing flaw that allows out-of-bounds write due to insufficient input validation. This can let remote attackers execute arbitrary code in the context of the vulnerable process. User interaction is required (visit a malicious pa...

CVE-2020-17422

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-17423

Foxit Studio Photo 3.6.6.922 is affected by a heap-based buffer overflow in ARW file parsing. The root cause is improper validation of the length of user-supplied data before copying to a heap buffer, enabling remote code execution when a user opens a malicious ARW file or visits a crafted page. ...

CVE-2020-17422

Foxit Studio Photo information disclosure (CVE-2020-17422) stems from improper validation in EPS file parsing, causing an out-of-bounds read of an allocated structure. Affected versions include Foxit Studio Photo 3.6.6.x; an attacker must lure a user to open a malicious page/file, enabling inform...

CVE-2020-17420

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-17420

Foxit Studio Photo NEF handling in version 3.6.6.922 is affected by an out-of-bounds read due to insufficient input validation, leading to information disclosure. Exploitation requires user interaction (visiting a malicious page or opening a malicious file) and, per the description, an attacker c...

CVE-2020-17421

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17421

Foxit Studio Photo vulnerable to remote code execution via NEF file parsing (CVE-2020-17421). The flaw is an out-of-bounds write due to improper validation in handling NEF data, allowing code execution in the context of the current process when a user visits a malicious page or opens a crafted fi...

CVE-2020-17419

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17419

Foxit Studio Photo CVE-2020-17419 affects Foxit Studio Photo 3.6.6.922 (CNVD notes 3.6.6.930 and earlier). The issue is an out-of-bounds write in NEF file parsing due to improper validation of user-supplied data, allowing remote code execution. Exploitation requires user interaction (visiting a m...

CVE-2020-17418

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-28394

A vulnerability has been identified in JT2Go All versions V13.1.0.1, Teamcenter Visualization All versions V13.1.0.1. Affected applications lack proper validation of user-supplied data when parsing of RAS files. This could result in a memory access past the end of an allocated buffer. An attacker...

CVE-2020-27005

A vulnerability has been identified in JT2Go All versions V13.1.0.1, Teamcenter Visualization All versions V13.1.0.1. Affected applications lack proper validation of user-supplied data when parsing of TGA files. This could result in an out of bounds write past the end of an allocated structure. A...

CVE-2020-27000

A vulnerability has been identified in JT2Go All versions V13.1.0.1, Teamcenter Visualization All versions V13.1.0.1. Affected applications lack proper validation of user-supplied data when parsing BMP files. This can result in a memory corruption condition. An attacker could leverage this...

CVE-2020-26998

A vulnerability has been identified in JT2Go All versions V13.1.0.2, Teamcenter Visualization All versions V13.1.0.2. Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a memory access past the end of an allocated buffer. An attacker...

CVE-2020-27006

A vulnerability has been identified in JT2Go All versions V13.1.0.1, Teamcenter Visualization All versions V13.1.0.1. Affected applications lack proper validation of user-supplied data when parsing of PCT files. This could result in a memory corruption condition. An attacker could leverage this...