PT-2017-11668

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 8.3.1 PhantomPDF versions prior to 8.3.1 Description The issue allows remote attackers to execute arbitrary code via a crafted document. This is due to an Arbitrary Write vulnerability. Recommendations For Foxit...

PT-2017-11624

Name of the Vulnerable Software and Affected Versions Foxit Reader version 8.3.0.14878 Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fla...

Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

Foxit Reader setItem Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the setItem functio...

Foxit Reader AFParseDateEx Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AFParseDateEx...

PT-2017-11626

Name of the Vulnerable Software and Affected Versions Foxit Reader version 8.2.1.6871 Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...

PT-2017-11627

Name of the Vulnerable Software and Affected Versions Foxit Reader version 8.2.1.6871 Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...

Foxit Reader App alert Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the app.alert...

KLA11065 Multiple vulnerabilities in Foxit Reader

Multiple serious vulnerabilities have been found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service and obtain sensitive information. Below is a complete list of vulnerabilities: 1. An use-after-free vulnerability in the...

Foxit Reader JPXDecode stream Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of May 22, 2017

For those of you who follow the National Football League NFL, do you remember Super Bowl 47? I wasn’t exactly thrilled about the teams that played since I’m not a 49ers or Ravens fan. What was interesting about the game is that it was halted for over half an hour in the third quarter because of a...

Foxit Reader Arbitrary Code Execution Vulnerability (CNVD-2017-07571)

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. An arbitrary code execution vulnerability exists in Foxit Reader. A remote attacker can exploit this vulnerability by creating a specially crafted JPEG2000 file to execute arbitrary code on the target system...

Foxit Reader Information Disclosure Vulnerability (CNVD-2017-08513)

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. An information disclosure vulnerability exists in Foxit Reader versions prior to 5.4. A man-in-the-middle attacker can exploit this vulnerability to intercept information sent during login API calls...

KLA11031 Multiple vulnerabilities in Foxit Reader

Multiple serious vulnerabilities have been found in Foxit Reader and Foxit Phantom PDF. Malicious users can exploit these vulnerabilities to obtain sensitive information or execute arbitary code. Below is a complete list of vulnerabilities: 1. Multiple vulnerabilities related to an improper parsi...

Foxit Reader Information Disclosure Vulnerability

Foxit Reader old name: Foxit PDF Reader, is a set of software used to read PDF format files, developed by Foxit Software Fujian Foxit Phantom is a professional PDF electronic document suite for businesses, running fast, easy to use and affordable. An information disclosure vulnerability exists in...

Foxit Reader Remote Code Execution Vulnerability

Foxit Reader old name: Foxit PDF Reader, is a set of software used to read PDF format files, developed by Foxit Software Fujian Foxit Phantom is a professional PDF electronic document suite for businesses, running fast, easy to use and affordable. A remote code execution vulnerability exists in...

Foxit Reader Arbitrary Code Execution Vulnerability (CNVD-2017-06802)

Foxit Reader old name: Foxit PDF Reader, is a set of software used to read PDF format files, developed by Foxit Software Fujian Foxit Phantom is a professional PDF electronic document suite for businesses, running fast, easy to use and affordable. An arbitrary code execution vulnerability exists ...

CVE-2017-8453

Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted font in a PDF document...

CVE-2017-8454

Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted font in a PDF document...

Out-of-bounds

Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted font in a PDF document...