CVE-2022-37386

CVE-2022-37386 affects Foxit PDF Reader 11.2.2.53575. The issue is in the resetForm method, where JavaScript actions can trigger a read past the end of an allocated object. This can be leveraged with other vulnerabilities to execute arbitrary code in the target process, with user interaction requ...

CVE-2022-37379

CVE-2022-37379 affects Foxit PDF Reader 11.2.1.53537. The flaw is in the handling of the AFSpecial_KeystrokeEx method where the code does not validate the existence of an object before performing operations. This can disclose sensitive information and, in conjunction with other vulnerabilities, m...

CVE-2022-37390

CVE-2022-37390 affects Foxit PDF Reader 11.2.2.53575; the flaw lies in AcroForms handling where the code does not validate the existence of an object before performing operations. This can allow code execution in the context of the current process after the target visits a malicious page or opens...

CVE-2022-37384

CVE-2022-37384 affects Foxit PDF Reader 11.2.1.53537. The flaw exists in the delay method due to not validating the existence of an object before operations, enabling arbitrary code execution when a user visits a malicious page or opens a malicious file (requires user interaction). Root cause per...

CVE-2022-37382

CVE-2022-37382 affects Foxit PDF Reader 11.2.1.53537 (and related Foxit/Editor variants). The root cause is a missing validation of an object before performing operations in removeIcon, allowing information disclosure and, with additional vulnerabilities, potential arbitrary code execution in the...

CVE-2022-37381

CVE-2022-37381 affects Foxit PDF Reader. The flaw is in the AFSpecial_KeystrokeEx method, arising from not validating the existence of an object before performing operations, which allows an attacker to execute code in the context of the current process. Exploitation requires user interaction (th...

CVE-2022-24908

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-24908

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-24908

CVE-2022-24908 affects Foxit PDF Reader 11.1.0.52543. The flaw is in parsing JP2 images, where crafted data can trigger a read past the end of an allocated buffer, allowing remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious pa...

CVE-2022-24907

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-24908

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-24907

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-24907

CVE-2022-24907 affects Foxit PDF Reader 11.1.0.52543. The flaw lies in JP2 image parsing, where crafted JP2 data can trigger a read past the end of an allocated buffer, allowing remote code execution in the context of the current process. User interaction is required (visiting a malicious page or...

Foxit PDF Reader XFA Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

PT-2023-1865 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this issue, where the target mus...

Vulnerabilities fixed in Foxit PDF Reader and Foxit PDF Editor

Foxit has fixed several vulnerabilities in PDF reader and PDF Editor. A malicious party could exploit the vulnerabilities to cause a denial-of-service, or potentially execute arbitrary code execute arbitrary code with the victim's privileges. The malicious party must trick the deceive the victim...

KLA48514 Multiple vulnerabilities in Foxit PDF Reader

Use After Free vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Original advisories Security updates available in Foxit PDF Reader 11.2.1 and Foxit PDF Editor 11.2.2 Related products Foxit-Reader...