CVE-2017-16584

Foxit Reader 8.3.2.25013 contains a vulnerability in util.printf that allows read past the end of an allocated object, enabling information disclosure. Exploitation requires user interaction (e.g., visiting a malicious page or opening a malicious file) and can be combined with other flaws to exec...

CVE-2017-14821

CVE-2017-14821 affects Foxit Reader 8.3.1.21155, with the root cause in parsing the xTsiz member of SIZ markers, leading to potential information disclosure and, in conjunction with other vulnerabilities, code execution. The exploit requires user interaction (visiting a malicious page or opening ...

CVE-2017-14825

CVE-2017-14825 affects Foxit Reader; vulnerability is a type confusion in XFAScriptObject.remove, enabling remote code execution. Affected: Foxit Reader 8.3.1.21155 with user interaction required (malicious page/file). Documented exploitation exists (malware in the wild per OpenVAS/OpenVAS notes)...

CVE-2017-14835

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the pag...

CVE-2017-16574

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2017-14821

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2017-16579

CVE-2017-16579 affects Foxit Reader 8.3.2.25013 (and related Foxit products). The vulnerability arises in the JPEG2000 image parsing path due to insufficient validation of user-supplied data, allowing an out-of-bounds read past the end of an allocated object. This can lead to information disclosu...

CVE-2017-16576

CVE-2017-16576 affects Foxit Reader, notably versions around 8.3.1.21155 (and related 8.3.x lines). The root cause is in the XFA field element where the code fails to validate object existence before operating on it, enabling remote code execution when a user opens a malicious page or file and in...

CVE-2017-14830

CVE-2017-14830 affects Foxit Reader 8.3.1.21155. The flaw is in the XFAScriptObject.setFocus method, caused by improper validation of user-supplied data, leading to a type confusion condition and remote code execution when a user visits a malicious page or opens a malicious file. Exploitation det...

CVE-2017-14829

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2017-10956

CVE-2017-10956 affects Foxit Reader 8.3.1.21155. The vulnerability is an out-of-bounds read in the tile index member of SOT markers due to insufficient validation of user-supplied data, allowing disclosure of sensitive information. Remote attackers can trigger via a malicious page or file, and it...

CVE-2017-14819

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2017-14828

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the w...

CVE-2017-14823

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2017-10956

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2017-14818

This vulnerability allows remote attackers to disclose sensitive on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

CVE-2017-14827

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2017-16572

CVE-2017-16572 affects Foxit Reader 8.3.1.21155 . The vulnerability resides in FormCalc's closeDoc method and is caused by improper validation that leads to a type confusion condition, enabling remote code execution in the context of the current process. Exploitation requires user interaction (th...

CVE-2017-14824

CVE-2017-14824 affects Foxit Reader 8.3.1.21155 (XFAScriptObject insert) where improper validation of user-supplied data can cause a type confusion, enabling remote code execution. The vulnerability requires user interaction (malicious page or file) and allows code execution with the current proc...

CVE-2017-16583

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.2.25013. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...