CVE-2017-16588

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2017-14831

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2017-16580

CVE-2017-16580 affects Foxit Reader 8.3.2.25013 where the ImageField node in XFA forms mishandles user-supplied data, causing an out-of-bounds/read past end vulnerability. The issue enables remote information disclosure and can be leveraged in conjunction with other flaws to execute code in the p...

CVE-2017-14826

Foxit Reader 8.3.1.21155 is affected by CVE-2017-14826 due to a type confusion in the XFA Node formNodes method caused by insufficient validation of user-supplied data. This allows remote code execution and requires user interaction (malicious page or file). Multiple sources confirm exploitation ...

CVE-2017-16582

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.2.25013. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2017-14819

CVE-2017-14819 affects Foxit Reader 8.3.1.21155 and is caused by an out-of-bounds read in the channel number member of the cdef box within JPEG2000 processing, leading to potential information disclosure. Exploitation requires user interaction (visiting a malicious page or opening a malicious fil...

CVE-2017-14827

CVE-2017-14827 affects Foxit Reader 8.3.1.21155 where the append method of XFA Node objects fails to properly validate user-supplied data, causing a type-confusion vulnerability that enables remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a mali...

CVE-2017-14836

CVE-2017-14836 is a remote code execution vulnerability in Foxit Reader 8.3.1. The issue arises from the modDate property of Annotation objects, where the code does not validate the existence of the target object before operating on it. This can allow an attacker to execute arbitrary code in the ...

CVE-2017-16575

CVE-2017-16575 affects Foxit Reader and is a remote code execution vulnerability in the XFA bind element. The root cause is a failure to validate the existence of an object before performing operations on it, enabling an attacker to execute arbitrary code in the current process when a user opens ...

CVE-2017-14822

CVE-2017-14822 affects Foxit Reader 8.3.1.21155. The root cause is an out-of-bounds read during parsing of the JPEG2000 SIZ marker xOsiz, due to inadequate validation of user-supplied data. This can allow remote attackers to disclose sensitive information via a malicious page or file; user intera...

CVE-2017-16581

Foxit Reader 8.3.2.25013 is affected by CVE-2017-16581. The vulnerability is a remote code execution flaw in the author attribute of the Document object due to not validating the existence of an object before performing operations. Exploitation requires user interaction (visiting a malicious page...

CVE-2017-16586

CVE-2017-16586 affects Foxit Reader 8.3.2.25013 (Windows) with a use-after-free-like flaw in addAnnot that fails to validate object existence before performing operations, enabling remote code execution under the current process when a user opens a malicious page or file. Exploitation requires us...

CVE-2017-16589

CVE-2017-16589 affects Foxit Reader 8.3.1.21155, where the vulnerability lies in parsing the yTsiz member of SIZ markers. The flaw causes an out-of-bounds read due to insufficient validation of user-supplied data, and can be exploited remotely by convincing a user to open a malicious page or file...

CVE-2017-14829

CVE-2017-14829 affects Foxit Reader 8.3.1.21155. The flaw is in XFAScriptObject.openList, caused by improper validation of user-supplied data, leading to a type confusion condition that allows remote code execution in the current process when a user opens a malicious page or file. Exploitation re...

CVE-2017-16587

Foxit Reader 8.3.2.25013 is affected by CVE-2017-16587 due to a removeField method that fails to verify object existence before operating, enabling remote code execution with user interaction (malicious page/file). Exploitation is described across multiple sources (NVD/CNVD/ZDI) with the root cau...

CVE-2017-14818

CVE-2017-14818 affects Foxit Reader 8.3.1.21155 and relates to an out-of-bounds/read past end during JPEG2000 image parsing inside embedded PDFs. The flaw arises from insufficient validation of user-supplied data, enabling a remote attacker to disclose sensitive information and, in conjunction wi...

CVE-2017-14835

CVE-2017-14835 : Foxit Reader 8.3.1.21155 is vulnerable to remote code execution via the XFA Layout object page method due to type confusion from improper data validation. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). Impact: arbitrary code execut...

CVE-2017-16583

Foxit Reader 8.3.2.25013 is vulnerable to a remote code execution flaw in the XFA dataset element (missing validation of object existence). Exploitation requires user interaction (visiting a malicious page or opening a malicious file) and can execute code with the current process context. Affecte...

CVE-2017-16582

Foxit Reader 8.3.2.25013 is affected by a remote code execution vulnerability in the clearItems XFA method due to improper validation, leading to a type confusion. Exploitation requires user interaction (visiting a malicious page or opening a malicious file) and can run code with the current proc...

CVE-2017-16584

Foxit Reader 8.3.2.25013 contains a vulnerability in util.printf that allows read past the end of an allocated object, enabling information disclosure. Exploitation requires user interaction (e.g., visiting a malicious page or opening a malicious file) and can be combined with other flaws to exec...