Lucene search
+L

213 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/25 12:00 a.m.•4 views

CVE-2019-17141: Use After Free

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS7.9AI score0.05186EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
•added 2019/10/22 12:00 a.m.•48 views

Foxit PhantomPDF Text Field Calculate Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS2.2AI score0.05186EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/10/22 12:00 a.m.•4 views

PT-2019-14972

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 9.6.0.25114 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...

8.8CVSS0.05186EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2019/10/16 12:00 a.m.•19 views

The vulnerability of the calculate_gain() function in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a intruder to compromise data integrity, gain unauthorized access to protected information, and cause service failure.

The vulnerability of the calculategain function in the Freeware Advanced Audio Decoder 2 FAAD2 is related to the escape from memory buffers. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service...

7.8CVSS5.5AI score0.0145EPSS
SaveExploits1References9Affected Software6
BDU FSTEC
BDU FSTEC
•added 2019/10/16 12:00 a.m.•17 views

The vulnerability of the calculate_gain function in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a intruder to compromise data integrity, gain unauthorized access to protected information, and cause service failure.

The vulnerability of the calculategain function in the Freeware Advanced Audio Decoder 2 FAAD2 is related to an error that causes stack overflow. Exploiting this vulnerability can allow attackers to compromise data integrity, gain unauthorized access to protected information, and cause service...

7.8CVSS5.6AI score0.01324EPSS
SaveExploits1References7Affected Software3
Zero Day Initiative
Zero Day Initiative
•added 2019/10/15 12:00 a.m.•39 views

Adobe Acrobat Pro DC XFA calculate Event Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

7.8CVSS2.2AI score0.03637EPSS
SaveExploits0References1
OSV
OSV
•added 2019/10/04 6:15 p.m.•15 views

CVE-2019-13317

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.1AI score0.07711EPSS
SaveExploits0References2
OSV
OSV
•added 2019/10/04 6:15 p.m.•16 views

CVE-2019-13316

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.5AI score0.07711EPSS
SaveExploits0References2
NVD
NVD
•added 2019/10/04 6:15 p.m.•38 views

CVE-2019-13316

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.8AI score0.07711EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/10/04 5:35 p.m.•46 views

CVE-2019-13316

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.8AI score0.07711EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/04 12:00 a.m.•5 views

CVE-2019-13316: Use After Free

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.8AI score0.07711EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/04 12:00 a.m.•3 views

CVE-2019-13317: Use After Free

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.8AI score0.07711EPSS
SaveExploits0References3
CNVD
CNVD
•added 2019/07/08 12:00 a.m.•15 views

Foxit PhantomPDF Calculate Memory Misreference Vulnerability

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A memory misreference vulnerability exists in the handling of the Calculate operation in Foxit PhantomPDF 9.5.0.20723 and earlier versions. The vulnerability stems from a failure to verify the existence ...

7.8CVSS7.4AI score0.07711EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/07/08 12:00 a.m.•12 views

Foxit PhantomPDF Button Calculate Remote Code Execution Vulnerability

Foxit PhantomPDF is a multifunctional PDF editor. A remote code execution vulnerability exists in the handling of Calculate operations in Foxit PhantomPDF 9.5.0.20723 and earlier versions. The vulnerability stems from a failure to validate the existence of an object before performing an operation...

7.8CVSS8.1AI score0.07711EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/07/05 12:00 a.m.•3 views

PT-2019-13252

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 9.5.0.20723 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...

7.8CVSS0.07711EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2019/07/05 12:00 a.m.•3 views

PT-2019-13253

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 9.5.0.20723 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...

7.8CVSS0.07711EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2019/07/05 12:00 a.m.•37 views

Foxit PhantomPDF Button Calculate Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.3AI score0.07711EPSS
SaveExploits0References1
OSV
OSV
•added 2019/05/08 5:29 p.m.•17 views

CVE-2019-2046

In CalculateInstanceSizeForDerivedClass of objects.cc, there is possible memory corruption due to an integer overflow. This could lead to remote code execution in the proxy auto-config with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Androi...

9.8CVSS7.9AI score0.01334EPSS
SaveExploits0References1
OSV
OSV
•added 2018/12/18 1:29 a.m.•11 views

ALPINE-CVE-2018-20197

There is a stack-based buffer underflow in the third instance of the calculategain function in libfaad/sbrhfadj.c in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8. A crafted input will lead to a denial of service or possibly unspecified other impact because limiting the additional noise energy...

7.8CVSS7.3AI score0.01317EPSS
SaveExploits1References1
OSV
OSV
•added 2018/12/18 1:29 a.m.•13 views

DEBIAN-CVE-2018-20197

There is a stack-based buffer underflow in the third instance of the calculategain function in libfaad/sbrhfadj.c in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8. A crafted input will lead to a denial of service or possibly unspecified other impact because limiting the additional noise energy...

7.8CVSS7.3AI score0.01317EPSS
SaveExploits1References1
Rows per page
Query Builder