KLA11648 Multiple vulnerabilities in Foxit PDF Reader

A multiple use-after-free vulnerabilities in the JavaScript engine can be exploited by a specially crafted PDF document to execute arbitrary code. Original advisories Foxit Security Bulletins Related products Foxit-Reader Foxit-Phantom-PDF Foxit-Reader-Enterprise CVE list CVE-2019-5130 high...

Foxit PDF pc Client Software DLL Hijacking Vulnerability

Foxit PDF provides the same PDF rendering engine as Foxit Reader and Foxit Fengyuan PDF electronic document processing suite, using the same underlying technology as Google Chrome's embedded PDF reader, which provides a fast and clear reading experience for a wide range of users. Foxit PDF pc...

Foxit PDF Reader Vulnerable to 8 High-Severity Flaws

Patches are available for eight high-severity flaws impacting the popular PDF software Foxit Reader. The bugs, which exist on Windows versions of the software, enable a remote attacker to execute arbitrary code on vulnerable systems. This week, Foxit Software, the company behind Foxit Reader,...

CVE-2019-5031

An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.4.1.16828. A specially crafted PDF document can trigger an out-of-memory condition which isn't handled properly, resulting in arbitrary code execution. An attacker needs ...

CVE-2019-5031

An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.4.1.16828. A specially crafted PDF document can trigger an out-of-memory condition which isn't handled properly, resulting in arbitrary code execution. An attacker needs ...

CVE-2019-5031

CVE-2019-5031 affects Foxit PDF Reader, version 9.4.1.16828. The vulnerability is a memory corruption in the V8/JavaScript engine that can be triggered by a specially crafted PDF, causing an out-of-memory condition and arbitrary code execution. Exploitation requires the user to open the malicious...

Vulnerability Spotlight: Foxit PDF Reader JavaScript Array.includes remote code execution vulnerability

Aleksandar Nikolic of Cisco Talos discovered this vulnerability. Foxit PDF Reader contains a remote code execution vulnerability in its JavaScript engine. Foxit aims to be one of the most feature-rich PDF readers on the market, and contains many similar functions to that of Adobe Acrobat Reader...

Foxit PDF SDK ActiveX Command Injection Vulnerability (CNVD-2019-21954)

Foxit PDF SDK ActiveX is China's Foxit Foxit company's a PDF software development kit, but also a visual programming components. The product provides PDF display and annotation features. A command injection vulnerability exists in Foxit PDF SDK ActiveX 5.5.0 and earlier versions, which stems from...

Foxit PDF SDK ActiveX License Issue Vulnerability

Foxit PDF SDK ActiveX is China's Foxit Foxit company's a PDF software development kit, but also a visual programming components. The product provides PDF display and annotation features. A security vulnerability exists in Foxit PDF SDK ActiveX 5.5.0 and earlier versions, which stems from a lack o...

Foxit PDF SDK ActiveX Command Injection Vulnerability (CNVD-2019-21955)

Foxit PDF SDK ActiveX is a visual programming components , not only to provide PDF display and annotation features , but also has a small amount of resources , distribution of small size and so on. A command injection vulnerability exists in Foxit PDF SDK ActiveX 5.5.0 and earlier versions. The...

Foxit PDF SDK ActiveX File Write Vulnerability

Foxit PDF SDK ActiveX is a visual programming components , not only to provide PDF display and annotation features , but also has a small amount of resources , distribution of small size and so on. Foxit PDF SDK ActiveX 5.5.0 and earlier versions in the use of JavaScript API Doc.exportAsFDF file...

Foxit PDF SDK ActiveX Installed (Windows)

Binary data foxitpdfsdkactivexinstalled.nbin...

Foxit PDF SDK ActiveX < 5.5.1 Multiple Vulnerabilities

According to its version, the Foxit PDF SDK ActiveX application installed on the remote Windows host is prior to 5.5.1. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability exists due to a lack of security permission control which could allow LaunchURL...

Foxit PDF SDK ActiveX Resource Management Error Vulnerability

Foxit PDF SDK ActiveX is China's Foxit Foxit company's a PDF software development kit, but also a visual programming components. The product provides PDF display and annotation features. A memory misreference vulnerability exists in Foxit PDF SDK ActiveX 5.5.0 and earlier versions. The...

CVE-2018-3956

An exploitable out-of-bounds read vulnerability exists in the handling of certain XFA element attributes of Foxit Software's PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger an out-of-bounds read, which can disclose sensitive memory content and aid in exploitation when...

PT-2019-10730 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit Software's PDF Reader version 9.1.0.5096 Description: The issue is related to the handling of certain XFA element attributes, which can lead to an out-of-bounds read when a specially crafted PDF document is opened. This can result in th...

Foxit PDF SDK ActiveX Buffer Overflow Vulnerability

Foxit PDF SDK ActiveX is China's Foxit Foxit Software Corporation of a PDF software development kit, but also a visual programming components, it provides PDF display and annotation and other functions. A stack buffer overflow vulnerability exists in Foxit PDF SDK ActiveX 5.5.0 and earlier...

Foxit PDF SDK ActiveX Command Injection Vulnerability

Foxit PDF SDK ActiveX is China's Foxit Foxit Software Corporation of a PDF software development kit, but also a visual programming components, it provides PDF display and annotation and other functions. Foxit PDF SDK ActiveX 5.5.0 and previous versions of the command injection vulnerability, the...

Foxit PDF Reader XFA xdpContent information leak vulnerability

Summary An exploitable out-of-bounds read vulnerability exists in the handling of certain XFA element attributes of Foxit Software’s PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger an out-of-bounds read, which can disclose sensitive memory content and aid in exploitati...

CVE-2018-20247

In Foxit Quick PDF Library all versions prior to 16.12, issue where loading a malformed or malicious PDF containing a recursive page tree structure using the LoadFromFile, LoadFromString or LoadFromStream functions results in a stack overflow...