Foxit Reader 'CreateFXPDFConvertor' Function Buffer Overflow Vulnerability - Windows

Foxit Reader is prone to heap based buffer overfolw vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Foxit Reader Multiple Vulnerabilities (May 2017) - Windows

Foxit Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:foxitsoftware:reader";...

CVE-2016-3740

Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdfx86.dll in Foxit Reader 7.3.4.311 allows remote attackers to execute arbitrary code via a large SamplesPerPixel value in a crafted TIFF image that is mishandled during PDF conversion. This is fixed in 8.0...

Heap overflow

Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdfx86.dll in Foxit Reader 7.3.4.311 allows remote attackers to execute arbitrary code via a large SamplesPerPixel value in a crafted TIFF image that is mishandled during PDF conversion. This is fixed in 8.0...

CVE-2016-3740

Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdfx86.dll in Foxit Reader 7.3.4.311 allows remote attackers to execute arbitrary code via a large SamplesPerPixel value in a crafted TIFF image that is mishandled during PDF conversion. This is fixed in 8.0...

CVE-2016-3740

Foxit Reader 7.3.4.311 is affected by a heap-based buffer overflow in the CreateFXPDFConvertor function of ConvertToPdf_x86.dll triggered by a crafted TIFF with a large SamplesPerPixel value during PDF conversion. Root cause: mishandling of SamplesPerPixel in TIFF parsing. Consequence: remote arb...

PT-2017-8419

Name of the Vulnerable Software and Affected Versions Foxit Reader versions 7.3.4.311 and earlier Description The issue is related to a heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf x86.dll, which allows remote attackers to execute arbitrary code via a large...

CVE-2016-3740: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdfx86.dll in Foxit Reader 7.3.4.311 allows remote attackers to execute arbitrary code via a large SamplesPerPixel value in a crafted TIFF image that is mishandled during PDF conversion. This is fixed in 8.0...

KLA10996 ACE Vulnerability in Foxit Reader

Heap-based buffer overflow vulnerability was found in Foxit Reader. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a a large SamplesPerPixel value in a crafted TIFF image. Original advisories Foxit bulletin Exploitatio...

Foxit Reader and PhantomPDF Information Disclosure Vulnerability

Foxit Reader is a PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF is a commercial version. An information disclosure vulnerability exists in Foxit Reader and Foxit PhantomPDF. An attacker can exploit this vulnerability to obtain sensitive information that could...

CVE-2017-6883

The ConvertToPDF plugin in Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted TIFF image. The vulnerability could lead to information...

Out-of-bounds

The ConvertToPDF plugin in Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted TIFF image. The vulnerability could lead to information...

CVE-2017-6883

The ConvertToPDF plugin in Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted TIFF image. The vulnerability could lead to information...

CVE-2017-6883

The CVE-2017-6883 issue affects Foxit Reader (before 8.2.1) and Foxit PhantomPDF (before 8.2.1) on Windows, via the ConvertToPDF plugin when gflags is enabled. A crafted TIFF image can trigger an out-of-bounds read, causing application crash and potential information disclosure; attacker could le...

CVE-2017-6883

The ConvertToPDF plugin in Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted TIFF image. The vulnerability could lead to information...

CVE-2017-6883: Out-of-bounds Read

The ConvertToPDF plugin in Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted TIFF image. The vulnerability could lead to information...

PT-2017-17393

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 8.2.1 PhantomPDF versions prior to 8.2.1 Description The issue allows remote attackers to cause a denial of service, potentially leading to information disclosure, via a crafted TIFF image. This could be leverage...

Foxit Reader Field deleteItemAt Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the deleteItemAt...

Foxit Reader execMenuItem Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the execMenuItem...

Foxit Reader ePub Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ePub...