Foxit PDF Reader JBIG2 Parser Information Disclosure Vulnerability

Summary A large out of bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. Combined with another vulnerability, it can be used to leak heap memory layout and in bypassing ASLR. Tested Versions Foxit Software Foxit Reader 8.0.2.805 Produc...

Foxit vulnerability: the 4 billion users at risk-vulnerability and early warning-the black bar safety net

! The popular PDF reader Foxit developers recently fixed a 1 2 at the risk of security vulnerabilities,these vulnerabilities may lead to remote code execution. This reader has about 4 million users,they think this is a Adobe Reader is the perfect alternative. The official fix for the windows and...

Foxit PDF Reader 1.0.1.0925 - CPDF_DIBSource::TranslateScanline24bpp Out-of-Bounds Read

Exploit for linux platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=744 We have identified the following crash due to an out-of-bounds read in Foxit PDF Reader version 1.0.1.0925 for Linux 64-bit, when started with a specially crafted PDF file in the...

Foxit PDF Reader 1.0.1.0925 - CPDF_StreamContentParser::~CPDF_StreamContentParser Heap Memory Corruption

Foxit PDF Reader 1.0.1.0925 - CPDFStreamContentParser::CPDFStreamContentParser Heap Memory Corruption Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=741 We have identified the following memory corruption vulnerability in Foxit PDF Reader version 1.0.1.0925 for Linux 64-bit, whe...

Foxit PDF Reader 1.0.1.0925 - CFX_BaseSegmentedArray::IterateIndex Memory Corruption

Exploit for linux platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=742 We have identified the following memory corruption vulnerability in Foxit PDF Reader version 1.0.1.0925 for Linux 64-bit, when started with a specially crafted PDF file in the...

Foxit PDF Reader 1.0.1.0925 - CFX_BaseSegmentedArray::IterateIndex Memory Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=742 We have identified the following memory corruption vulnerability in Foxit PDF Reader version 1.0.1.0925 for Linux 64-bit, when started with a specially crafted PDF file in the following way: $ DISPLAY=:1 FoxitReader...

Foxit PDF Reader 1.0.1.0925 - CFX_WideString::operator= Invalid Read

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=745 We have identified the following crash due to an invalid read in Foxit PDF Reader version 1.0.1.0925 for Linux 64-bit, when started with a specially crafted PDF file in the following way: $ DISPLAY=:1 FoxitReader...

Foxit PDF Reader 1.0.1.0925 - CPDF_StreamContentParser::~CPDF_StreamContentParser Heap Memory Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=741 We have identified the following memory corruption vulnerability in Foxit PDF Reader version 1.0.1.0925 for Linux 64-bit, when started with a specially crafted PDF file in the following way: $ MALLOCCHECK=3 DISPLAY=:1 FoxitRead...

Foxit PDF Reader 1.0.1.0925 - CPDF_DIBSource::TranslateScanline24bpp Out-of-Bounds Read

Foxit PDF Reader 1.0.1.0925 - CPDFDIBSource::TranslateScanline24bpp Out-of-Bounds Read Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=744 We have identified the following crash due to an out-of-bounds read in Foxit PDF Reader version 1.0.1.0925 for Linux 64-bit, when started wi...

Foxit PDF Reader 1.0.1.0925 - kdu_core::kdu_codestream::get_subsampling Memory Corruption

Exploit for linux platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=743 We have identified the following memory corruption vulnerability in Foxit PDF Reader version 1.0.1.0925 for Linux 64-bit, when started with a specially crafted PDF file in the...

Foxit PDF Reader 1.0.1.0925 - kdu_core::kdu_codestream::get_subsampling Memory Corruption

Foxit PDF Reader 1.0.1.0925 - kducore::kducodestream::getsubsampling Memory Corruption Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=743 We have identified the following memory corruption vulnerability in Foxit PDF Reader version 1.0.1.0925 for Linux 64-bit, when started with ...

Foxit PDF Reader 1.0.1.0925 - CFX_BaseSegmentedArray::IterateIndex Memory Corruption

Foxit PDF Reader 1.0.1.0925 - CFXBaseSegmentedArray::IterateIndex Memory Corruption Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=742 We have identified the following memory corruption vulnerability in Foxit PDF Reader version 1.0.1.0925 for Linux 64-bit, when started with a...

Foxit PDF Reader 1.0.1.0925 - CPDF_DIBSource::TranslateScanline24bpp Out-of-Bounds Read

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=744 We have identified the following crash due to an out-of-bounds read in Foxit PDF Reader version 1.0.1.0925 for Linux 64-bit, when started with a specially crafted PDF file in the following way: $ MALLOCCHECK=3 DISPLAY=:1...

Foxit PDF Reader 1.0.1.0925 - CFX_WideString::operator Invalid Read

Foxit PDF Reader 1.0.1.0925 - CFXWideString::operator Invalid Read Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=745 We have identified the following crash due to an invalid read in Foxit PDF Reader version 1.0.1.0925 for Linux 64-bit, when started with a specially crafted PDF...

Foxit PDF Reader 1.0.1.0925 - CPDF_StreamContentParser::~CPDF_StreamContentParser Heap Based Memory

Exploit for linux platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=741 We have identified the following memory corruption vulnerability in Foxit PDF Reader version 1.0.1.0925 for Linux 64-bit, when started with a specially crafted PDF file in the...

Foxit PDF Reader 1.0.1.0925 - CFX_WideString::operator= Invalid Read

Exploit for linux platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=745 We have identified the following crash due to an invalid read in Foxit PDF Reader version 1.0.1.0925 for Linux 64-bit, when started with a specially crafted PDF file in the...

Foxit PDF Reader 1.0.1.0925 - kdu_core::kdu_codestream::get_subsampling Memory Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=743 We have identified the following memory corruption vulnerability in Foxit PDF Reader version 1.0.1.0925 for Linux 64-bit, when started with a specially crafted PDF file in the following way: $ DISPLAY=:1 FoxitReader...

CVE-2014-8074

Buffer overflow in the SetLogFile method in Foxit.FoxitPDFSDKProCtrl.5 in Foxit PDF SDK ActiveX 2.3 through 5.0.1820 before 5.0.2.924 allows remote attackers to execute arbitrary code via a long string, related to global variables...

Buffer overflow

Buffer overflow in the SetLogFile method in Foxit.FoxitPDFSDKProCtrl.5 in Foxit PDF SDK ActiveX 2.3 through 5.0.1820 before 5.0.2.924 allows remote attackers to execute arbitrary code via a long string, related to global variables...

CVE-2014-8074

Foxit PDF SDK ActiveX vulnerability (CVE-2014-8074): The SetLogFile method in Foxit.FoxitPDFSDKProCtrl.5 of Foxit PDF SDK ActiveX versions 2.3–5.0.1820 is susceptible to a buffer overflow when given a long string, related to global variables. This can allow remote code execution. Exploitation inf...