Lucene search
+L

5419 matches found

CNVD
CNVD
added 2018/04/28 12:0 a.m.9 views

Foxit Reader XFA Button Remote Code Execution Vulnerability (CNVD-2018-09950)

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of the XFA Button element, which can be exploited by an attacker to execute arbitrary code in the context of the current process due to a failure to validate an object befor...

8.8CVSS7.7AI score0.02737EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/04/28 12:0 a.m.8 views

Foxit Reader XFA execEvent Method Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the XFA execEvent event of the Button element, which can be exploited by an attacker to execute arbitrary code in the context of the current process due to a lack of validation before...

8.8CVSS7.7AI score0.03185EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/04/28 12:0 a.m.10 views

Foxit Reader XFA borderColor Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of the XFA borderColor property. The vulnerability can be exploited to execute arbitrary code due to a lack of validation before performing an operation on an object...

8.8CVSS7.8AI score0.02737EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/04/28 12:0 a.m.6 views

Foxit Reader addField Remote Code Execution Vulnerability (CNVD-2018-09956)

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of the addField method, which can be exploited to execute arbitrary code in the context of the current process due to a lack of validation before performing an operation on ...

8.8CVSS7.7AI score0.02737EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/04/28 12:0 a.m.5 views

Foxit Reader ePub Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the parsing of ePub files, which can be exploited by an attacker to execute arbitrary code in the context of the current process due to a lack of proper validation of user-supplied data...

8.8CVSS7.7AI score0.03508EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/04/28 12:0 a.m.5 views

Foxit Reader Link setAction Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the Link setAction handling, which can be exploited to execute arbitrary code in the context of the current process, due to a lack of validation before performing an action on an object...

8.8CVSS7.7AI score0.02737EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/04/28 12:0 a.m.9 views

Foxit Reader TextBox Calculate Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the TextBox Calculate handling, which can be exploited to execute arbitrary code in the context of the current process due to a lack of validation before performing an operation on the...

8.8CVSS7.8AI score0.03185EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2018/04/27 12:0 a.m.35 views

Foxit Reader < 9.1 Multiple Vulnerabilities

The version of Foxit Reader installed on the remote Windows host is prior to 9.1. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109399; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

8.8CVSS7.3AI score0.03643EPSS
SaveExploits8References6
CNVD
CNVD
added 2018/04/25 12:0 a.m.27 views

Foxit Reader Remote Code Execution Vulnerability (CNVD-2018-08267)

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A remote code execution vulnerability exists in Foxit Reader version 9.0.1.1049. A remote attacker can exploit this vulnerability to execute arbitrary code or cause a denial of service with a specially crafted PDF...

8.8CVSS8.5AI score0.03356EPSS
SaveExploits2References1
CNVD
CNVD
added 2018/04/25 12:0 a.m.9 views

Foxit Reader and PhantomPDF Memory Misreference Vulnerability (CNVD-2018-08295)

Foxit Reader is a Chinese Foxit Foxit software company of a PDF document reader.PhantomPDF is a commercial version. A memory misreference vulnerability exists in Foxit Reader versions prior to 9.1 and PhantomPDF versions prior to 9.1. A remote attacker can exploit this vulnerability to execute...

7.8CVSS7.4AI score0.03247EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2018/04/25 12:0 a.m.46 views

Foxit Reader Multiple Vulnerabilities (Apr 2018) - Windows

Foxit Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:foxitsoftware:reader";...

8.8CVSS8.7AI score0.63689EPSS
SaveExploits36References3
OpenVAS
OpenVAS
added 2018/04/25 12:0 a.m.64 views

Foxit Reader Portable Detection (Windows SMB Login)

SMB login and WMI file search based detection of Foxit Reader Portable. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4AI score
SaveExploits0
Prion
Prion
added 2018/04/24 8:29 p.m.21 views

Heap overflow

In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of the BITMAPINFOHEADER record in BMP files. The issue results from the lack of proper validation of the biSize member, which can result in a heap based buffer overflow. An attacker can leverage this to...

6.8CVSS8.8AI score0.03643EPSS
SaveExploits1References4Affected Software2
OSV
OSV
added 2018/04/24 8:29 p.m.3 views

CVE-2017-17557

In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of the BITMAPINFOHEADER record in BMP files. The issue results from the lack of proper validation of the biSize member, which can result in a heap based buffer overflow. An attacker can leverage this to...

8.8CVSS6.3AI score0.03643EPSS
SaveExploits1References4
CVE
CVE
added 2018/04/24 8:0 p.m.76 views

CVE-2017-17557

CVE-2017-17557: Foxit Reader &lt; 9.1 and Foxit PhantomPDF

8.8CVSS8.7AI score0.03643EPSS
SaveExploits1References4Affected Software2
Cvelist
Cvelist
added 2018/04/24 8:0 p.m.29 views

CVE-2017-17557

In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of the BITMAPINFOHEADER record in BMP files. The issue results from the lack of proper validation of the biSize member, which can result in a heap based buffer overflow. An attacker can leverage this to...

8.8AI score0.03643EPSS
SaveExploits1References4
CNVD
CNVD
added 2018/04/24 12:0 a.m.7 views

Foxit Reader and PhantomPDF Memory Misreference Vulnerability (CNVD-2018-08293)

Foxit Reader is a Chinese Foxit Foxit software company of a PDF document reader.PhantomPDF is a commercial version. A memory misreference vulnerability exists in Foxit Reader versions prior to 9.1 and PhantomPDF versions prior to 9.1. A remote attacker can exploit this vulnerability to execute...

8.8CVSS7.4AI score0.02583EPSS
SaveExploits1References1
OSV
OSV
added 2018/04/23 11:29 p.m.1 views

CVE-2018-10303

A use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to execute arbitrary code, aka iDefense ID V-y0nqfutlf3...

8.8CVSS6AI score0.02583EPSS
SaveExploits1References2
NVD
NVD
added 2018/04/23 11:29 p.m.28 views

CVE-2018-10303

A use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to execute arbitrary code, aka iDefense ID V-y0nqfutlf3...

8.8CVSS9AI score0.02583EPSS
SaveExploits1References2
Prion
Prion
added 2018/04/23 11:29 p.m.18 views

Design/Logic Flaw

A use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to execute arbitrary code, aka iDefense ID V-y0nqfutlf3...

6.8CVSS8.9AI score0.02583EPSS
SaveExploits1References2Affected Software2
Rows per page
Query Builder