Lucene search
+L

5429 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/05/07 12:0 a.m.44 views

Foxit Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D...

7.8CVSS3.9AI score0.02819EPSS
SaveExploits0References1
Kaspersky
Kaspersky
added 2021/05/06 12:0 a.m.51 views

KLA12166 Multiple vulnerabilities in Foxit Reader

Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A use after free vulnerability can be exploited remotely via...

8.8CVSS9.5AI score0.05589EPSS
SaveExploits2References4
CNNVD
CNNVD
added 2021/05/06 12:0 a.m.16 views

Foxit Reader for Windows 资源管理错误漏洞

Foxit Reader for Windows is a Windows-based PDF document reader from the Chinese company Foxit. Foxit Reader for Windows suffers from a resource management error vulnerability that originates from an error when handling certain XFA forms or annotation objects. A remote attacker could exploit the...

8.8CVSS7.9AI score0.01765EPSS
SaveExploits1References3
Talos
Talos
added 2021/05/06 12:0 a.m.199 views

Foxit Reader FileAttachment annotation use-after-free vulnerability

Summary A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A specially crafted PDF document can trigger the reuse of previously free memory, which can lead to arbitrary code execution. An attacker needs to trick the user into openi...

8.8CVSS8.9AI score0.01765EPSS
SaveExploits1
Kaspersky
Kaspersky
added 2021/05/06 12:0 a.m.52 views

KLA12191 Buffer overflow vulnerability in Foxit Reader

A buffer overflow vulnerability was found in Foxit Reader. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories Foxit Security Bulletins Related products Foxit-Reader CVE list CVE-2021-31476 critical Solution Update to the latest...

7.8CVSS8.5AI score0.06379EPSS
SaveExploits0References3
Kaspersky
Kaspersky
added 2021/03/22 12:0 a.m.46 views

KLA12126 ACE vulnerability in Foxit Reader

An out of bounds read vulnerability was found in Foxit Reader. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Foxit Security Bulletins Related products Foxit-Reader CVE list CVE-2021-27270 critical Solution Update to the latest version Download Foxit...

7.8CVSS8.2AI score0.02692EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2021/03/22 12:0 a.m.31 views

Foxit Reader < 10.1.3 RCE

According to its version, the Foxit Reader application installed on the remote Windows host is prior to 10.1.3. It is, therefore affected by an out-of-bounds read vulnerability, which can be exploited to cause remote code execution. Note that Nessus has not tested for this issue but has instead...

7.8CVSS7.3AI score0.02692EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/03/11 12:0 a.m.16 views

The vulnerability affects the implementation of the RotatePage command in the Foxit Reader text viewer and the Foxit PhantomPDF PDF editing program. This allows an attacker to execute arbitrary code.

The vulnerability of the RotatePage function in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing software lies in data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

10CVSS7.6AI score0.04787EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/11 12:0 a.m.10 views

The vulnerability affects the implementation of the OCRAndExportToExcel function in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing software. This allows an attacker to execute arbitrary code.

The vulnerability of the OCRAndExportToExcel implementation in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing programs is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

10CVSS7.6AI score0.06602EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/11 12:0 a.m.7 views

The vulnerability affects the implementation of the “AddWatermark” command in the Foxit Reader text viewer software and the Foxit PhantomPDF PDF editing software. This allows a malicious individual to execute arbitrary code.

The vulnerability of the “AddWatermark” command in the Foxit Reader text viewer and the Foxit PhantomPDF PDF editing program is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

10CVSS7.6AI score0.04689EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/11 12:0 a.m.8 views

The vulnerability of the GetFieldValue function implementation in the program for displaying text in Foxit Reader and the PDF editing program Foxit PhantomPDF allows a perpetrator to execute arbitrary code.

The vulnerability of the GetFieldValue function implementation in programs for displaying text in Foxit Reader and editing PDF files in Foxit PhantomPDF is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

10CVSS7.6AI score0.04689EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/11 12:0 a.m.8 views

The vulnerability affects the implementation of the “Export” command in the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program. This allows a malicious individual to execute arbitrary code.

The vulnerability of the “Export” command in the Foxit Reader text viewer and the Foxit PhantomPDF PDF editing program is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

10CVSS7.6AI score0.04689EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/11 12:0 a.m.10 views

The vulnerability of the SetFieldValue command implementation in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing program allows a perpetrator to execute arbitrary code.

The vulnerability of the GetFieldValue function implementation in programs for displaying text in Foxit Reader and editing PDF files in Foxit PhantomPDF is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

10CVSS7.6AI score0.04689EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/11 12:0 a.m.7 views

The vulnerability of the resetForm method in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing programs allows a perpetrator to execute arbitrary code.

The vulnerability of the resetForm method in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing programs relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

10CVSS7.5AI score0.04787EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/11 12:0 a.m.9 views

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to memory usage after its release, allows a hacker to execute arbitrary code.

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program lies in the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.04787EPSS
SaveExploits0References4Affected Software2
Tenable Nessus
Tenable Nessus
added 2021/02/19 12:0 a.m.32 views

Foxit Reader < 4.1 PDF Spoofing (macOS)

The version of Foxit Reader for Mac installed on the remote macOS host is prior to 4.1.3. It is, therefore, affected by a PDF spoofing vulnerability. An Evil Annotation Attack may deliver incorrect validation results when validating certain certified PDF files whose visible content was...

7.8CVSS7.8AI score0.02294EPSS
SaveExploits0References2
NCSC
NCSC
added 2021/02/17 12:0 a.m.5 views

Vulnerability fixed in Foxit Reader and Foxit PhantomPDF

Foxit has fixed vulnerabilities in Foxit Reader and Foxit PhantomPDF. A malicious party could potentially exploit it to cause a denial-of-service or execute arbitrary execute arbitrary code with the privileges of the logged-in user. Foxit has released updates to fix the vulnerabilities. For more...

7.8CVSS7.7AI score0.03554EPSS
SaveExploits0
OSV
OSV
added 2021/02/12 12:15 a.m.3 views

CVE-2020-27860

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.5AI score0.03554EPSS
SaveExploits0References2
NVD
NVD
added 2021/02/12 12:15 a.m.19 views

CVE-2020-27860

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS0.03554EPSS
SaveExploits0References2
Prion
Prion
added 2021/02/12 12:15 a.m.16 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS8AI score0.03554EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder