Lucene search
+L

1142 matches found

CNVD
CNVD
added 2018/10/17 12:0 a.m.6 views

Foxit Reader and Foxit PhantomPDF for Windows Memory Misreference Vulnerability (CNVD-2018-23219)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A post-release reuse vulnerability exists in the handling of the isCompatibleNS method of the XFA object in Foxit Reader 9.2.0.9297...

8.8CVSS8.8AI score0.03918EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2018/10/12 12:0 a.m.32 views

Foxit PhantomPDF < 9.3 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 9.3. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid118092; scriptversion"1.8...

8.8CVSS7.7AI score0.09482EPSS
SaveExploits15References32
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:0 a.m.30 views

Foxit PhantomPDF display Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2AI score0.03855EPSS
SaveExploits2References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:0 a.m.30 views

Foxit PhantomPDF username Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.1AI score0.03855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:0 a.m.33 views

Foxit PhantomPDF setItems Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2AI score0.03855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:0 a.m.34 views

Foxit PhantomPDF HTML2PDF HTML Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion ...

7.8CVSS3.3AI score0.03855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:0 a.m.36 views

Foxit PhantomPDF HTML2PDF HTML Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion ...

7.8CVSS3.1AI score0.03855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:0 a.m.36 views

Foxit PhantomPDF richValue Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS1.6AI score0.03855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:0 a.m.28 views

Foxit PhantomPDF HTML2PDF HTML Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion ...

7.8CVSS3.1AI score0.03855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:0 a.m.33 views

Foxit PhantomPDF exportValues Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS1.9AI score0.03855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:0 a.m.30 views

Foxit PhantomPDF rect Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.1AI score0.03855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:0 a.m.27 views

Foxit PhantomPDF HTML2PDF HTML Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.8AI score0.03855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:0 a.m.32 views

Foxit PhantomPDF HTML2PDF HTML Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS3AI score0.03855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:0 a.m.32 views

Foxit PhantomPDF fillColor Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2AI score0.03855EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/10/10 12:0 a.m.5 views

Foxit Reader and Foxit PhantomPDF JavaScript Engine Memory Misreference Vulnerability (CNVD-2018-20723)

Foxit Reader is China Foxit Foxit software company a PDF document reader.Foxit PhantomPDF is a commercial version.JavaScript engine is one of the JavaScript scripting engine. A memory misreference vulnerability exists in the JavaScript engine in Foxit Reader 9.2.0.9297 and earlier versions and...

7.8CVSS7.7AI score0.02663EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/10/10 12:0 a.m.7 views

Foxit Reader and Foxit PhantomPDF JavaScript Engine Memory Misreference Vulnerability (CNVD-2018-20724)

Foxit Reader is China Foxit Foxit software company a PDF document reader.Foxit PhantomPDF is a commercial version.JavaScript engine is one of the JavaScript scripting engine. A memory misreference vulnerability exists in the JavaScript engine in Foxit Reader 9.2.0.9297 and earlier versions and...

7.8CVSS7.7AI score0.02663EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2018/10/03 12:0 a.m.31 views

Foxit PhantomPDF < 9.3 Multiple Vulnerabilities - Windows

Foxit PhantomPDF is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:foxitsoftware:phantompdf";...

9.8CVSS8.2AI score0.03197EPSS
SaveExploits11References2
CNVD
CNVD
added 2018/09/30 12:0 a.m.5 views

Foxit Reader and PhantomPDF Memory Misreference Vulnerability (CNVD-2018-20729)

Foxit Reader is a PDF document reader from China's Foxit Software Corporation.Foxit PhantomPDF is a commercial version. A security vulnerability exists in Foxit Reader and PhantomPDF versions prior to 9.3, which stems from the program's failure to properly handle the properties of the Annotation...

9.8CVSS9.6AI score0.03176EPSS
SaveExploits0References1
OSV
OSV
added 2018/09/29 5:29 p.m.3 views

CVE-2018-17781

Foxit PhantomPDF and Reader before 9.3 allow remote attackers to trigger Uninitialized Object Information Disclosure because creation of ArrayBuffer and DataView objects is mishandled...

7.5CVSS5.8AI score0.02442EPSS
SaveExploits1References2
Prion
Prion
added 2018/09/29 5:29 p.m.24 views

Information disclosure

Foxit PhantomPDF and Reader before 9.3 allow remote attackers to trigger Uninitialized Object Information Disclosure because creation of ArrayBuffer and DataView objects is mishandled...

5CVSS7.3AI score0.02442EPSS
SaveExploits1References2Affected Software2
Rows per page
Query Builder