PT-2022-6132

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader version 11.1.0.52543 Description A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader. This vulnerability can be triggered by a specially-crafted PDF document, leading to the reuse of...

CVE-2021-40420: Use After Free

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An attacker needs to trick the user to open the...

Vulnerability Spotlight: Memory corruption and use-after-free vulnerabilities in Foxit PDF Reader

Aleksandar Nikolic of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered a memory corruption and use-after-free vulnerability in the Foxit PDF Reader. Foxit PDF Reader is one of the most popular PDF document readers currently... This is only the...

PT-2022-6199

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader version 11.1.0.52543 Description A memory corruption issue exists in the JavaScript engine of Foxit PDF Reader. This issue can be triggered by a specially-crafted PDF document, causing an exception that is improperly handled a...

Foxit PDF Reader < 11.2.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader application previously named Foxit Reader installed on the remote Windows host is prior to 11.2.1. It is, therefore affected by multiple vulnerabilities: - Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204...

Vulnerabilities fixed in Foxit PDF Reader and Foxit PDF Editor

Vulnerabilities have been fixed in the PDF Reader and PDF Editor from Foxit. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User rights Access to system data This...

Foxit PDF Reader和Foxit PDF Editor 资源管理错误漏洞

Foxit PDF Reader is a PDF reader. Foxit PDF Reader has a security vulnerability that can be exploited by remote attackers to submit a special file request, which induces the user to parse it and can crash the application or execute arbitrary code in the application context...

Foxit PDF Reader和Foxit PDF Editor 缓冲区错误漏洞

Foxit PDF Reader is a PDF reader. Foxit PDF Reader handles a buffer overflow vulnerability in some Javascript methods, which can be exploited by a remote attacker to submit a special file request and trick the user into parsing it, which can crash the application or execute arbitrary code in the...

KLA12437 Multiple vulnerabilities in Foxit PDF Reader

Multiple vulnerabilities were found in Foxit PDF Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability can be...

Foxit PDF Reader for Mac < 11.1.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader for Mac application previously named Foxit Reader for Mac installed on the remote macOS host is prior to 11.1.1. It is, therefore affected by multiple vulnerabilities: - An out-of-bounds read error exists in Foxit PDF Reader for Mac due to the...

PT-2022-2371

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions prior to 2020 Adobe Acrobat Reader versions prior to 2020 Adobe Acrobat 2017 Adobe Acrobat Reader 2017 Adobe Acrobat 2020 versions prior to 21.007.20099 Adobe Acrobat Reader 2020 versions prior to 21.007.20099 Adobe...

PT-2022-1449

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader DC versions 21.007.20099 and earlier Adobe Acrobat Reader DC versions 20.004.30017 and earlier Adobe Acrobat Reader DC versions 17.011.30204 and earlier Adobe Acrobat 2017 affected versions not specified Adobe Acrobat Read...

PT-2022-2252

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader DC versions 21.007.20099 and earlier Adobe Acrobat Reader DC versions 20.004.30017 and earlier Adobe Acrobat Reader DC versions 17.011.30204 and earlier Adobe Acrobat 2017 affected versions not specified Adobe Acrobat 2020...

PT-2022-1486

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader DC versions 21.007.20099 and earlier Adobe Acrobat Reader DC versions 20.004.30017 and earlier Adobe Acrobat Reader DC versions 17.011.30204 and earlier Adobe Acrobat 2017 affected versions not specified Adobe Acrobat Read...

CVE-2021-45980

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via getURL in the JavaScript API...

CVE-2021-45979

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via app.launchURL in the JavaScript API...

CVE-2021-45978

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via xfa.host.gotoURL in the XFA API...

CVE-2021-45979

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via app.launchURL in the JavaScript API...

Code injection

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via app.launchURL in the JavaScript API...

CVE-2021-45979

CVE-2021-45979 affects Foxit PDF Reader and PDF Editor on macOS prior to 11.1. The issue allows an attacker to execute arbitrary code via the JavaScript API function app.launchURL, enabling remote code execution if a user opens a malicious document or triggers the affected API. The connected sour...