PT-2018-14095

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.1.0.5096 Description This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file...

PT-2018-14087

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.0.1.5096 Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...

PT-2018-14093

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.0.1.5096 Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...

PT-2018-14089

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.0.1.5096 Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...

PT-2018-14083

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF and Reader versions prior to 9.3 Description The issue arises from the mishandling of properties of Annotation objects, leading to potential remote code execution or denial of service due to use-after-free errors. This...

PT-2018-14082

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF and Reader versions prior to 9.3 Description The issue arises from the mishandling of properties of Annotation objects, leading to potential remote code execution or denial of service due to use-after-free errors. This...

PT-2018-14097

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.1.0.5096 Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...

PT-2018-14079

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF and Reader versions prior to 9.3 Description The issue arises from the mishandling of properties of Annotation objects, leading to potential remote code execution or denial of service due to use-after-free. This specifically...

CVE-2018-17607: Use After Free

Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service use-after-free because properties of Annotation objects are mishandled. This relates to one of five distinct types of Annotation objects...

CVE-2018-17611: Use After Free

Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service use-after-free because properties of Annotation objects are mishandled. This relates to one of five distinct types of Annotation objects...

Foxit Reader setInterval Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

CVE-2018-17608: Use After Free

Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service use-after-free because properties of Annotation objects are mishandled. This relates to one of five distinct types of Annotation objects...

Foxit Reader Type Obfuscation Vulnerability (CNVD-2018-17493)

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A type confusion vulnerability exists in the handling of PDF files in Foxit Reader version 9.1.0.5096, where the program does not properly validate user-submitted data. The vulnerability can be exploited by a remote...

CVE-2018-14317

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-14317

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-14317

Foxit Reader 9.1.0.5096 is affected by a PDF processing type-confusion vulnerability that enables remote code execution when a user opens a malicious page/file. Root cause is improper validation of user-supplied data during PDF handling, allowing an attacker to execute code in the current process...

CVE-2018-14317

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-14317: Access of Resource Using Incompatible Type

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit Reader < 8.3.7 Multiple Vulnerabilities

The version of Foxit Reader installed on the remote Windows host is prior to 8.3.7. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid112059; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate"...

Foxit Reader 9.0.1.1049 Use-After-Free

%PDF 1 0 obj 2 0 obj /S /JavaScript /JS / --------------------------------------------------------------------------------------------------- Exploit Title : Foxit Reader RCE with DEP bypass on Heap with shellcode Date : 08/04/2018 4 Aug Exploit Author : Manoj Ahuje Tested on : Windows 7 Pro x32...