CVE-2020-12247: Out-of-bounds Read

In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information from an out-of-bounds read because a text-string index continues to be used after splitting a string into two parts. A crash may also occur...

CVE-2020-12248: Out-of-bounds Write

In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can execute arbitrary code via a heap-based buffer overflow because dirty image-resource data is mishandled...

PT-2020-13071

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 10.0.1 PhantomPDF versions prior to 9.7.3 and versions prior to 10.0.1 Description The issue allows attackers to obtain sensitive information from an out-of-bounds read because a text-string index continues to be...

PT-2020-13072

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 10.0.1 PhantomPDF versions prior to 9.7.3 and versions prior to 10.0.1 Description The issue allows attackers to execute arbitrary code via a heap-based buffer overflow because dirty image-resource data is...

CVE-2020-11493: Insufficient Verification of Data Authenticity

In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information about an uninitialized object because of direct transformation from PDF Object to Stream without concern for a crafted XObject...

Foxit Reader 3.1.0.0111 < 3.2 Privilege Escalation (macOS)

The version of Foxit Reader for Mac installed on the remote macOS host is 3.1.0.0111. It is, therefore, affected by a privilege escalation vulnerability due to incorrect permission setting. An attacker could exploit this by modifying the dynamic libraries in the Plugins directory. Note that Nessu...

Foxit Reader and PhantomPDF Resource Management Error Vulnerability (CNVD-2020-65177)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A resource management error vulnerability exists in the NodeProperties::InferReceiverMapsUnsafe method in Foxit Reader 10.0.0.35798 and earlier versions and Foxit PhantomPDF 10.0.0.35798 and earlier...

Foxit Reader < 4.0 Privilege Escalation (macOS)

The version of Foxit Reader for Mac installed on the remote macOS host is prior to 4.0. It is, therefore, affected by a Signature Validation Bypass vulnerability that delivers incorrect validation results when validating certain PDF files that have been modified maliciously or contains non-standa...

Denial of Service Vulnerability in Foxit Reader (CNVD-2020-46066)

Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. A denial of service vulnerability exists in Foxit Reader, which can be exploited by attackers to cause a denial of service...

Denial of Service Vulnerability in Foxit Reader (CNVD-2020-46067)

Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. A denial of service vulnerability exists in Foxit Reader, which can be exploited by attackers to cause a denial of service...

Denial of Service Vulnerability in Foxit Reader (CNVD-2020-46065)

Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. A denial of service vulnerability exists in Foxit Reader, which can be exploited by attackers to cause a denial of service...

Denial of Service Vulnerability in Foxit Reader

Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. A denial of service vulnerability exists in Foxit Reader, which can be exploited by attackers to cause a denial of service...

KLA11922 Multiple vulnerabilities in Foxit Reader

Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability can be exploited remotely to...

Unspecified Vulnerability in Foxit Reader and Foxit PhantomPDF

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader versions prior to 9.5 and PhantomPDF versions prior to 9.5, which arises from the program not properly handling synonyms. An attacker could exploit the...

Foxit Reader and PhantomPDF 3D Plugin Buffer Overflow Vulnerability

Foxit Reader and so on are all Chinese Foxit Foxit company's products.Foxit Reader is a PDF document reader.Foxit 3D Plugin is a use in the PDF document reader in the 3D plugin.Foxit PhantomPDF is a PDF document reader.Foxit PhantomPDF is a PDF document reader. A buffer overflow vulnerability...

Foxit Reader and PhantomPDF 3D Plugin Denial of Service Vulnerability

Foxit Reader and so on are all Chinese Foxit Foxit company's products.Foxit Reader is a PDF document reader.Foxit 3D Plugin is a use in the PDF document reader in the 3D plugin.Foxit PhantomPDF is a PDF document reader.Foxit PhantomPDF is a PDF document reader. A security vulnerability exists in ...

Foxit Reader and PhantomPDF Buffer Overflow Vulnerability (CNVD-2020-32451)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A buffer overflow vulnerability exists in Foxit Reader prior to version 9.6 and PhantomPDF prior to version 9.6. An attacker could exploit this vulnerability to cause the application to crash...

Foxit Reader and PhantomPDF Resource Management Error Vulnerability (CNVD-2020-32091)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader versions prior to 9.7 and PhantomPDF versions prior to 9.7, which arises from a program that creates data for each page at the application level. An attack...

Unspecified Vulnerability in Foxit Reader and PhantomPDF (CNVD-2020-32081)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in the CAS service in Foxit Reader prior to version 9.7.2 and PhantomPDF prior to version 9.7.2, which stems from the program not limiting the number of failed login...

Foxit Reader and PhantomPDF Information Disclosure Vulnerability (CNVD-2020-32457)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader versions prior to 9.5 and PhantomPDF versions prior to 9.5, which stems from the program not properly handling cloud credentials. An attacker could exploit...