CVE-2020-15638

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.2.29539. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-15638

The CVE-2020-15638 entry affects Foxit PhantomPDF (version 9.7.2.29539) where the flaw in NodeProperties::InferReceiverMapsUnsafe arises from insufficient validation of user-supplied data, causing a type confusion condition. This can allow remote code execution in the context of the current proce...

CVE-2020-15637

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

Foxit PhantomPDF < 3.4 DoS (macOS)

The version of Foxit PhantomPDF installed on the remote macOS host is prior to 3.4. It is, therefore, affected by a denial of service DoS vulnerability due to a null pointer dereference. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Foxit PhantomPDF < 4.0 Privilege Escalation (macOS)

The version of Foxit PhantomPDF installed on the remote macOS host is prior to 4.0. It is, therefore, affected by a Signature Validation Bypass vulnerability that delivers incorrect validation results when validating certain PDF files that have been modified maliciously or contains non-standard...

Foxit PhantomPDF SetLocalDescription Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PhantomPDF JSCreate Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PhantomPDF < 10.0.1 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 10.0.1. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's...

Foxit Reader and PhantomPDF Resource Management Error Vulnerability (CNVD-2020-32464)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader versions prior to 9.2 and PhantomPDF versions prior to 9.2. An attacker could exploit this vulnerability to cause the application to crash...

Foxit Reader and PhantomPDF Information Disclosure Vulnerability (CNVD-2020-32457)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader versions prior to 9.5 and PhantomPDF versions prior to 9.5, which stems from the program not properly handling cloud credentials. An attacker could exploit...

Foxit PhantomPDF Mishandling of Homonyms Vulnerability

PhantomPDF is a Chinese Foxit Foxit company for enterprise-level users of PDF document processing software. A vulnerability exists in Foxit PhantomPDF versions prior to 8.3.10 due to improper handling of homonyms. An attacker can exploit this vulnerability to cause an impact on the integrity of...

Foxit Reader and PhantomPDF Buffer Overflow Vulnerability (CNVD-2020-32451)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A buffer overflow vulnerability exists in Foxit Reader prior to version 9.6 and PhantomPDF prior to version 9.6. An attacker could exploit this vulnerability to cause the application to crash...

Foxit PhantomPDF Signature Verification Bypass Vulnerability

PhantomPDF is a Chinese Foxit Foxit company for enterprise-level users of PDF document processing software. A signature verification bypass vulnerability exists in Foxit PhantomPDF versions prior to 8.3.10. An attacker can bypass signature verification by using a modified document or a document...

Foxit Reader and PhantomPDF DocuSign Plugin Trust Management Issues Vulnerability

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A trust management issue exists in the DocuSign plug-in in Foxit Reader versions prior to 9.7.2 and PhantomPDF versions prior to 9.7.2. An attacker can exploit this vulnerability to obtain hard-coded...

Foxit Reader and PhantomPDF Resource Management Error Vulnerability (CNVD-2020-32084)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader versions prior to 9.7.2 and PhantomPDF versions prior to 9.7.2. The vulnerability can be exploited by an attacker to cause an application crash resource...

Foxit PhantomPDF Information Disclosure Vulnerability (CNVD-2020-32466)

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit PhantomPDF versions prior to 8.3.6. The vulnerability can be exploited by remote attackers to execute code via GoToE or GoToR operations...

Foxit PhantomPDF Resource Management Error Vulnerability (CNVD-2020-32087)

Foxit PhantomPDF is China Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit PhantomPDF versions prior to 8.3.12, where the program creates data for each page at the application level. An attacker could exploit the vulnerability to consume large amounts of memory...

Foxit PhantomPDF code issue vulnerability (CNVD-2020-32467)

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit PhantomPDF versions prior to 8.3.6. The vulnerability can be exploited by an attacker to execute arbitrary applications with the help of an embedded executable file...

Foxit PhantomPDF code issue vulnerability (CNVD-2020-32465)

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A code issue vulnerability exists in Foxit PhantomPDF versions prior to 8.3.6. A remote attacker can exploit this vulnerability to execute code via a DLL...

Foxit PhantomPDF Mac Code Issues Vulnerabilities

Foxit PhantomPDF Mac is China Foxit Foxit company's a macOS-based PDF document reader. A code issue vulnerability exists in Foxit PhantomPDF Mac versions prior to 3.4. The vulnerability stems from an improperly designed or implemented problem in the code development process of a networked system ...