2920 matches found
Design/Logic Flaw
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-34875
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-34875
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-34875
CVE-2022-34875 affects Foxit PDF Reader 11.2.1.53537. The flaw is in handling ADBC objects; by actions in JavaScript, an attacker can trigger a read past the end of an allocated object, potentially disclosing sensitive information and enabling arbitrary code execution in the context of the proces...
CVE-2022-34874
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-34874
CVE-2022-34874 affects Foxit PDF Reader 11.2.2.53575. The flaw is in the handling of Doc objects, where JavaScript actions can trigger a read past the end of an allocated object, potentially enabling arbitrary code execution in the context of the current process when a user opens a malicious page...
CVE-2022-34873
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-34873
CVE-2022-34873 affects Foxit PDF Reader 11.2.1.53537 (and is referenced in multiple advisories) where JavaScript actions on Annotation objects can trigger a read past the end of an allocated object, enabling sensitive data disclosure and, in conjunction with other flaws, arbitrary code execution ...
CVE-2022-28683
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2022-28683
Foxit PDF Reader 11.2.1.53537 is affected by a remote code execution vulnerability in the deletePages path where the code fails to validate object existence before operating on it. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The issue can allow ...
CVE-2022-28682
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2022-28682
CVE-2022-28682 affects Foxit PDF Reader 11.2.1.53537. The issue lies in Doc object handling where JavaScript actions can trigger a read past the end of an allocated object, enabling remote code execution in the context of the current process after user interaction (visiting a malicious page or op...
CVE-2022-28681
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-28681
CVE-2022-28681 affects Foxit PDF Reader 11.2.1.53537. The flaw is in the deletePages method: JavaScript actions can read past the end of an allocated object, and, with other vulnerabilities, may enable code execution in the process context. Exploitation requires user interaction (visiting a malic...
CVE-2022-28680
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2022-28680
CVE-2022-28680 affects Foxit PDF Reader 11.2.1.53537 where the bug lies in handling of Annotation objects, failing to validate object existence before operations. This allows remote code execution in the context of the current process and requires user interaction (visiting a malicious page or op...
CVE-2022-28679
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2022-28679
CVE-2022-28679 affects Foxit PDF Reader 11.2.1.53537. The vulnerability is in the handling of Annotation objects and stems from not validating the existence of an object before performing operations, enabling remote code execution in the current process when a user opens a malicious file or visit...
CVE-2022-28678
CVE-2022-28678 affects Foxit PDF Reader 11.2.1.53537. The flaw is in the handling of Doc objects, where the code does not validate the existence of an object before performing operations, enabling arbitrary code execution in the context of the current process. Exploitation requires user interacti...
CVE-2022-28678
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...