CVE-2017-16574

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2017-14826

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2017-14818

This vulnerability allows remote attackers to disclose sensitive on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

CVE-2017-14822

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2017-14821

CVE-2017-14821 affects Foxit Reader 8.3.1.21155, with the root cause in parsing the xTsiz member of SIZ markers, leading to potential information disclosure and, in conjunction with other vulnerabilities, code execution. The exploit requires user interaction (visiting a malicious page or opening ...

CVE-2017-16581

Foxit Reader 8.3.2.25013 is affected by CVE-2017-16581. The vulnerability is a remote code execution flaw in the author attribute of the Document object due to not validating the existence of an object before performing operations. Exploitation requires user interaction (visiting a malicious page...

CVE-2017-14834

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the sty...

CVE-2017-16575

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XFA...

CVE-2017-16573

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2017-14826

Foxit Reader 8.3.1.21155 is affected by CVE-2017-14826 due to a type confusion in the XFA Node formNodes method caused by insufficient validation of user-supplied data. This allows remote code execution and requires user interaction (malicious page or file). Multiple sources confirm exploitation ...

CVE-2017-14823

CVE-2017-14823 affects Foxit Reader 8.3.1.21155. The flaw is in the signer method of XFA’s Signature objects, caused by inadequate validation, leading to a type confusion that enables remote code execution in the context of the current process. Exploitation requires user interaction (visiting a m...

CVE-2017-16589

CVE-2017-16589 affects Foxit Reader 8.3.1.21155, where the vulnerability lies in parsing the yTsiz member of SIZ markers. The flaw causes an out-of-bounds read due to insufficient validation of user-supplied data, and can be exploited remotely by convincing a user to open a malicious page or file...

CVE-2017-16588

CVE-2017-16588 corresponds to a Foxit Reader vulnerability where the parser mishandles SOT markers, leading to an out-of-bounds read and information disclosure. It affects Foxit Reader 8.3.1.21155 and is exploitable remotely with user interaction (visiting a malicious page or opening a malicious ...

CVE-2017-16577

CVE-2017-16577 affects Foxit Reader 8.3.1.21155. The flaw is in the alignment attribute of Field objects where the program fails to validate object existence before operating on it, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a mali...

CVE-2017-10959

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2017-16572

CVE-2017-16572 affects Foxit Reader 8.3.1.21155 . The vulnerability resides in FormCalc's closeDoc method and is caused by improper validation that leads to a type confusion condition, enabling remote code execution in the context of the current process. Exploitation requires user interaction (th...

CVE-2017-14822

CVE-2017-14822 affects Foxit Reader 8.3.1.21155. The root cause is an out-of-bounds read during parsing of the JPEG2000 SIZ marker xOsiz, due to inadequate validation of user-supplied data. This can allow remote attackers to disclose sensitive information via a malicious page or file; user intera...

CVE-2017-16580

CVE-2017-16580 affects Foxit Reader 8.3.2.25013 where the ImageField node in XFA forms mishandles user-supplied data, causing an out-of-bounds/read past end vulnerability. The issue enables remote information disclosure and can be leveraged in conjunction with other flaws to execute code in the p...

CVE-2017-14819

CVE-2017-14819 affects Foxit Reader 8.3.1.21155 and is caused by an out-of-bounds read in the channel number member of the cdef box within JPEG2000 processing, leading to potential information disclosure. Exploitation requires user interaction (visiting a malicious page or opening a malicious fil...

CVE-2017-14835

CVE-2017-14835 : Foxit Reader 8.3.1.21155 is vulnerable to remote code execution via the XFA Layout object page method due to type confusion from improper data validation. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). Impact: arbitrary code execut...