Lucene search
+L

5419 matches found

Zero Day Initiative
Zero Day Initiative
added 2016/07/18 12:0 a.m.18 views

Foxit Reader ConvertToPDF JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the ConvertToPDF...

4.3CVSS4.2AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.9 views

The vulnerability of the Foxit Reader software, which allows a malicious actor to compromise protected information

Cross-site execution of stored scripts in Foxit Reader when reading and displaying file names and their paths in the “Recent Documents” section on the initial page allows attackers to replace registry entries and force the application to download malicious files...

4.3CVSS5.8AI score
SaveExploits0References1Affected Software1
ThreatPost
ThreatPost
added 2016/06/30 1:52 p.m.9 views

Foxit Patches 12 Vulnerabilities, 8 That Could Lead to RCE

Foxit patched a dozen vulnerabilities in its PDF reader software this week, more than half of which could allow an attacker to directly execute arbitrary code on vulnerable installations of the product. The company released version 8.0 of its Foxit Reader and Foxit PhantomPDF on Monday, addressin...

0.6AI score
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2016/06/29 12:0 a.m.16 views

Foxit Reader FlateDecode Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within FlateDecode. A...

6.8CVSS7AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/06/29 12:0 a.m.23 views

Foxit Reader exportData Restrictions Bypass Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the exportData. Fox...

6.8CVSS7AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/06/29 12:0 a.m.15 views

Foxit Reader JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to leak sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within JPEG parsing. A...

4.3CVSS3.3AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/06/29 12:0 a.m.46 views

Foxit Reader ConvertToPDF GIF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the ConvertToPDF...

6.8CVSS7AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/06/29 12:0 a.m.24 views

Foxit Reader Safe Mode Bypass Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...

4.3CVSS6.4AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/06/29 12:0 a.m.17 views

Foxit Reader ConvertToPDF BMP Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

4.3CVSS6AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/06/29 12:0 a.m.16 views

Foxit Reader FlateDecode Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within FlateDecode. A...

6.8CVSS7AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/06/29 12:0 a.m.15 views

Foxit Reader ConvertToPDF BMP Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the ConvertToPDF...

6.8CVSS7AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/06/29 12:0 a.m.16 views

Foxit Reader GoToR action Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

6.8CVSS7.1AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/06/29 12:0 a.m.21 views

Foxit Reader ConvertToPDF TIFF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the ConvertToPDF...

6.8CVSS6.7AI score
SaveExploits0References1
CNVD
CNVD
added 2016/06/28 12:0 a.m.4 views

Foxit Reader and Foxit PhantomPDF Remote Code Execution Vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation produced a small PDF document viewing and printing program, PhantomPDF is a commercial version. A security vulnerability exists in Foxit Reader and PhantomPDF 7.3.4.311 and earlier versions, which can be triggered by a heap memory...

7.2AI score
SaveExploits0References1
Trellix
Trellix
added 2016/05/20 12:0 a.m.17 views

Attacks on SWIFT Banking System Benefit From Insider Knowledge

ARCHIVED STORY Attacks on SWIFT Banking System Benefit From Insider Knowledge By Trellix · May 20, 2016 In recent months, we’ve seen headlines about the compromise of a bank in Bangladesh from which cybercriminals attempted to steal US$951 million. The malware they used was able to manipulate and...

7.3AI score
SaveExploits0
seebug.org
seebug.org
added 2016/05/04 12:0 a.m.21 views

Foxit Reader 7.3.0 UAF 漏洞

No description provided by source...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2016/04/28 12:0 a.m.6 views

Foxit Reader and PhantomPDF Denial of Service Vulnerability (CNVD-2016-02732)

Foxit Reader PhantomPDF is a commercial version of the Chinese Foxit Foxit Software Corporation's PDF document reader. A denial of service vulnerability exists in Foxit Reader PhantomPDF 7.3.0.118 and earlier versions that could allow a remote attacker to cause a denial of service via a crafted P...

5.5CVSS6.7AI score0.01377EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/04/28 12:0 a.m.7 views

Foxit Reader and PhantomPDF memory misreference vulnerability (CNVD-2016-02733)

Foxit Reader PhantomPDF is a commercial version of the Chinese Foxit Foxit Software Corporation's PDF document reader. A memory misreference vulnerability exists in Foxit Reader PhantomPDF 7.3.0.118 and earlier versions, which could allow a remote attacker to execute arbitrary code via a crafted...

7.8CVSS7.8AI score0.04182EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/04/28 12:0 a.m.9 views

Foxit Reader and PhantomPDF Denial of Service Vulnerability (CNVD-2016-02734)

Foxit Reader PhantomPDF is a commercial version of the Chinese Foxit Foxit Software Corporation's PDF document reader. A denial of service vulnerability exists in Foxit Reader PhantomPDF 7.3.0.118 and earlier versions, which allows remote attackers to cause a denial of service via a crafted JPEG...

7.8CVSS6.7AI score0.0274EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/04/27 12:0 a.m.7 views

Foxit Reader/PhantomPDF Memory Misreference Vulnerability

Foxit Reader is a small PDF document viewer and printing program. A memory misreference vulnerability exists in Foxit Reader/PhantomPDF versions prior to 7.3.4, which can be exploited by remote attackers to execute arbitrary code...

7.8CVSS7.5AI score0.0441EPSS
SaveExploits0References1
Rows per page
Query Builder