5430 matches found
CVE-2021-31471
This CVE (CVE-2021-31471) affects Foxit Reader 10.1.1.37576 and relates to information disclosure via U3D object handling in PDFs. The root cause is improper validation of user-supplied data that can lead to reading past the end of an allocated object. The Red Hat, CNVD, CNNVD, CNVD, and ZDI entr...
CVE-2021-31470
CVE-2021-31470 affects Foxit Reader 10.1.1.37576. The issue is a parsing/use-after-free in handling of U3D objects within PDFs, caused by not validating the existence of an object before performing operations. This can enable remote code execution with the current process context when a user visi...
CVE-2021-31470
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2021-31471
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2021-31469
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2021-31469
Foxit Reader 10.1.1.37576 contains an information-disclosure/ out-of-bounds vulnerability in the handling of U3D objects embedded in PDF files. The issue arises from insufficient validation of user-supplied data, allowing read past the end of an allocated object. Exploitation requires user intera...
CVE-2021-31468
Foxit Reader 10.1.3.37598 contains a U3D file parsing vulnerability in PDFs that allows remote code execution. The flaw stems from missing validation of user-supplied data, causing an out-of-bounds read past an allocated object. Exploitation requires the user to open a malicious PDF (or visit a m...
CVE-2021-31468
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2021-31467
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2021-31467
CVE-2021-31467 - Foxit Reader U3D parsing out-of-bounds read : The affected product is Foxit Reader 10.1.3.37598. The root cause is a lack of proper validation during U3D file parsing embedded in PDF documents, causing an out-of-bounds read of an allocated object. This information-disclosure flaw...
CVE-2021-31466
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2021-31466
Foxit Reader 10.1.3.37598 is affected by CVE-2021-31466 due to a flaw in U3D object handling within PDF parsing. The issue stems from inadequate validation of user-supplied data, enabling an out-of-bounds read that can lead to remote code execution in the context of the current process. Exploitat...
CVE-2021-31465
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2021-31465
CVE-2021-31465 affects Foxit Reader 10.1.3.37598. The vulnerability is in the handling of U3D objects within PDF files and stems from insufficient validation of user-supplied data, leading to a write past the end of an allocated data structure. This can allow a remote attacker to execute code in ...
CVE-2021-31464
CVE-2021-31464 affects Foxit Reader 10.1.3.37598 via U3D file parsing in PDFs. Root cause: lack of proper validation leads to an out-of-bounds read in embedded U3D handling, enabling information disclosure when a user opens a malicious file/page or visits a crafted page. Documented impact is info...
CVE-2021-31463
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2021-31463
CVE-2021-31463 affects Foxit Reader 10.1.3.37598. The vulnerability stems from improper validation in the handling of U3D objects embedded in PDF files, causing an out-of-bounds read that can disclose sensitive information. Exploitation requires user interaction (the target must open a malicious ...
CVE-2021-31464
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2021-31462
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2021-31462
Foxit Reader 10.1.3.37598 is affected by a U3D file parsing vulnerability that leads to information disclosure. The issue arises from improper validation of user-supplied data when handling embedded U3D objects in PDFs, allowing a read past the end of an allocated object. Exploitation requires us...