KLA12126 ACE vulnerability in Foxit Reader

An out of bounds read vulnerability was found in Foxit Reader. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Foxit Security Bulletins Exploitation Related products Foxit-Reader CVE list CVE-2021-27270 critical Solution Update to the latest version...

Foxit Reader < 10.1.3 RCE

According to its version, the Foxit Reader application installed on the remote Windows host is prior to 10.1.3. It is, therefore affected by an out-of-bounds read vulnerability, which can be exploited to cause remote code execution. Note that Nessus has not tested for this issue but has instead...

Foxit Reader PhantomPDF Memory Use RCE

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program lies in the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Foxit Reader resetForm Code Execution

The vulnerability of the resetForm method in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing programs relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Foxit Reader Export Code Execution

The vulnerability of the “Export” command in the Foxit Reader text viewer and the Foxit PhantomPDF PDF editing program is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Foxit Reader OCRAndExportToExcel Code Execution

The vulnerability of the OCRAndExportToExcel implementation in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing programs is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Foxit Reader SetFieldValue Code Execution

The vulnerability of the GetFieldValue function implementation in programs for displaying text in Foxit Reader and editing PDF files in Foxit PhantomPDF is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Foxit Reader RotatePage Code Execution

The vulnerability of the RotatePage function in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing software lies in data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Foxit Reader AddWatermark Code Execution

The vulnerability of the “AddWatermark” command in the Foxit Reader text viewer and the Foxit PhantomPDF PDF editing program is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Foxit Reader GetFieldValue Code Execution

The vulnerability of the GetFieldValue function implementation in programs for displaying text in Foxit Reader and editing PDF files in Foxit PhantomPDF is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Foxit Reader < 4.1 PDF Spoofing (macOS)

The version of Foxit Reader for Mac installed on the remote macOS host is prior to 4.1.3. It is, therefore, affected by a PDF spoofing vulnerability. An Evil Annotation Attack may deliver incorrect validation results when validating certain certified PDF files whose visible content was...

Vulnerability fixed in Foxit Reader and Foxit PhantomPDF

Foxit has fixed vulnerabilities in Foxit Reader and Foxit PhantomPDF. A malicious party could potentially exploit it to cause a denial-of-service or execute arbitrary execute arbitrary code with the privileges of the logged-in user. Foxit has released updates to fix the vulnerabilities. For more...

CVE-2020-27860

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-27860

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-27860

The CVE-2020-27860 entry affects Foxit Reader 10.0.1.35811, with the root cause in the processing of XFA templates due to insufficient validation that can cause a write past the end of an allocated data structure. This can allow remote code execution in the context of the current process, with us...

CVE-2020-27860

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit Reader 缓冲区错误漏洞

Foxit Reader is a PDF document reader. Foxit Reader suffers from an out-of-bounds write vulnerability that can be exploited by a remote attacker to submit a special file request, which can be tricked into parsing, crashing the application or executing arbitrary code in the application context...

CVE-2020-27860: Out-of-bounds Write

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-13548

In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting...