Lucene search
+L

6555 matches found

Zero Day Initiative
Zero Day Initiative
•added 2017/08/17 12:00 a.m.•68 views

(0Day) Foxit Reader launchURL Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within app.launchURL metho...

8.8CVSS8.4AI score0.03968EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2017/08/17 12:00 a.m.•4 views

PT-2017-11630

Name of the Vulnerable Software and Affected Versions Foxit Reader version 8.3.0.14878 Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fla...

8.8CVSS0.03968EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2017/08/08 12:00 a.m.•1 views

PT-2017-2640

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions affected versions not specified Adobe Acrobat Document Cloud versions affected versions not specified Foxit Reader versions affected versions not specified Adobe Reader Document Cloud versions affected versions not...

9.3CVSS0.19765EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2017/08/08 12:00 a.m.•1 views

PT-2017-2669

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions prior to 2017.009.20058 Adobe Acrobat versions prior to 2017.008.30051 Adobe Acrobat versions prior to 2015.006.30306 Adobe Acrobat versions prior to 11.0.20 Adobe Reader versions prior to 2017.009.20058 Adobe Reader...

9.3CVSS0.27071EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2017/07/13 12:00 a.m.•50 views

Foxit Reader < 8.3.1 Multiple Vulnerabilities

The version of Foxit Reader installed on the remote Windows host is prior to 8.3.1. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists in the AFParseDateEx function. An unauthenticated, remote attacker can exploit this, by convincing a user to open a speciall...

9.3CVSS7.2AI score0.04941EPSS
SaveExploits0References10
CNVD
CNVD
•added 2017/07/11 12:00 a.m.•21 views

Foxit Reader and PhantomPDF Arbitrary Write Remote Code Execution Vulnerability

Foxit Reader is a PDF document reader from China's Foxit Software Corporation.Foxit PhantomPDF is a commercial version. A security vulnerability exists in Foxit Reader versions prior to 8.3.1 and PhantomPDF versions prior to 8.3.1. A remote attacker can exploit the vulnerability to execute...

9.3CVSS7.9AI score0.04941EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2017/07/11 12:00 a.m.•57 views

Foxit Reader Arbitrary Write RCE Vulnerability - Windows

Foxit Reader is prone to an arbitrary write RCE vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.3CVSS7.5AI score0.04941EPSS
SaveExploits0References2
OSV
OSV
•added 2017/07/07 4:29 p.m.•14 views

CVE-2017-10994

Foxit Reader before 8.3.1 and PhantomPDF before 8.3.1 have an Arbitrary Write vulnerability, which allows remote attackers to execute arbitrary code via a crafted document...

7.3CVSS6.1AI score0.04941EPSS
SaveExploits0References3
Prion
Prion
•added 2017/07/07 4:29 p.m.•30 views

Code injection

Foxit Reader before 8.3.1 and PhantomPDF before 8.3.1 have an Arbitrary Write vulnerability, which allows remote attackers to execute arbitrary code via a crafted document...

9.3CVSS7.8AI score0.04941EPSS
SaveExploits0References3Affected Software2
NVD
NVD
•added 2017/07/07 4:29 p.m.•30 views

CVE-2017-10994

Foxit Reader before 8.3.1 and PhantomPDF before 8.3.1 have an Arbitrary Write vulnerability, which allows remote attackers to execute arbitrary code via a crafted document...

9.3CVSS7.5AI score0.04941EPSS
SaveExploits0References3
CVE
CVE
•added 2017/07/07 4:00 p.m.•84 views

CVE-2017-10994

Foxit CVE-2017-10994 affects Foxit Reader before 8.3.1 and Foxit PhantomPDF before 8.3.1. The vulnerability is described as an Arbitrary Write flaw that allows a remote attacker to execute arbitrary code via a crafted PDF document. Multiple connected advisories corroborate that the issue is a rem...

9.3CVSS7.6AI score0.04941EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2017/07/07 4:00 p.m.•37 views

CVE-2017-10994

Foxit Reader before 8.3.1 and PhantomPDF before 8.3.1 have an Arbitrary Write vulnerability, which allows remote attackers to execute arbitrary code via a crafted document...

7.7AI score0.04941EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2017/07/07 12:00 a.m.•5 views

PT-2017-11622

Name of the Vulnerable Software and Affected Versions Foxit Reader version 8.3.0.14878 Description This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file...

6.5CVSS0.02456EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2017/07/07 12:00 a.m.•5 views

PT-2017-11623

Name of the Vulnerable Software and Affected Versions Foxit Reader version 8.3.0.14878 Description This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file...

6.5CVSS0.02456EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2017/07/07 12:00 a.m.•3 views

PT-2017-11620

Name of the Vulnerable Software and Affected Versions Foxit Reader version 8.3.0.14878 Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fla...

8.8CVSS0.0259EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/07/07 12:00 a.m.•6 views

CVE-2017-10994: Write-what-where Condition

Foxit Reader before 8.3.1 and PhantomPDF before 8.3.1 have an Arbitrary Write vulnerability, which allows remote attackers to execute arbitrary code via a crafted document...

9.3CVSS6.5AI score0.04941EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2017/07/07 12:00 a.m.•37 views

Foxit Reader print Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the print function...

8.8CVSS1.8AI score0.0259EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2017/07/07 12:00 a.m.•3 views

PT-2017-11621

Name of the Vulnerable Software and Affected Versions Foxit Reader version 8.3.0.14878 Description This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file...

6.5CVSS0.02456EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2017/07/07 12:00 a.m.•3 views

PT-2017-11625

Name of the Vulnerable Software and Affected Versions Foxit Reader version 8.2.1.6871 Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...

8.8CVSS0.0259EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2017/07/07 12:00 a.m.•48 views

Foxit Reader execMenuItem Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the app.execMenuIte...

8.8CVSS2AI score0.03162EPSS
SaveExploits0References1
Rows per page
Query Builder