474 matches found
CVE-2020-27855
Foxit Studio Photo 3.6.6.922 is affected by CVE-2020-27855 due to an SR2 file parsing flaw. The root cause is improper validation of user-supplied data, causing a read past the end of an allocated structure. This information-disclosure/possible code-execution vector requires user interaction (tar...
CVE-2020-27855
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...
CVE-2020-27856
Foxit Studio Photo CR2 file parsing flaw in Foxit Studio Photo 3.6.6.922 (and earlier per CNVD/ZDI) due to improper validation of user-supplied data, causing an out-of-bounds read that discloses memory. User interaction is required (targets must open a malicious page/file). The issue can be lever...
CVE-2020-17436
Foxit Studio Photo 3.6.6.922 is affected by a CMP file parsing vulnerability causing an out-of-bounds read in the target process. The issue arises from insufficient validation of user-supplied data and can be leveraged with other vulnerabilities to execute code in the context of the current proce...
CVE-2020-17436
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...
CVE-2020-17435
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...
CVE-2020-17434
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...
CVE-2020-17434
CVE-2020-17434 concerns Foxit Studio Photo versions affected by an ARW file parsing flaw. The issue arises from insufficient validation of user-supplied data, causing a read past the end of an allocated structure and leading to information disclosure. Several connected sources (including ZDI advi...
CVE-2020-17435
CVE-2020-17435 affects Foxit Studio Photo (versions around 3.6.6.x). The vulnerability is a CR2 file parsing flaw that allows an information disclosure due to an out-of-bounds read caused by inadequate validation of user-supplied data. Exploitation requires user interaction (visiting a malicious ...
CVE-2020-17433
Foxit Studio Photo vulnerable in CMP file parsing leading to an out-of-bounds read in Foxit Studio Photo 3.6.6.922 (and affected earlier versions per CNVD). The flaw arises from insufficient validation of user-supplied data, allowing an attacker to read past the end of an allocated structure and ...
CVE-2020-17433
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...
CVE-2020-17432
Foxit Studio Photo vulnerability CVE-2020-17432 affects parsing of CR2 files and causes an out-of-bounds read due to inadequate input validation. This can lead to information disclosure and, when combined with other flaws, potential code execution in the target process. Exploitation requires user...
CVE-2020-17432
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...
CVE-2020-17431
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2020-17431
The CVE-2020-17431 entry describes a remote code execution in Foxit Studio Photo (confirmed affected: Foxit Studio Photo 3.6.6.922 and earlier per CNVD/NVD entries; ZDI cites a CR2 file parsing flaw). The root cause is improper validation during CR2 file parsing, causing a write past the end of a...
CVE-2020-17430
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2020-17430
Foxit Studio Photo is affected by CVE-2020-17430. The vulnerability resides in CR2 file parsing where improper validation can cause a write past the end of an allocated structure, enabling arbitrary code execution with the current process context after user interaction (e.g., visiting a malicious...
CVE-2020-17429
Foxit Studio Photo information disclosure (CVE-2020-17429) affects Foxit Studio Photo 3.6.6.922 and earlier (variants in linked sources also reference 3.6.6.930 and older). The root cause is improper validation of user-supplied data within CMP file handling, leading to a read past the end of an a...
CVE-2020-17428
Foxit Studio Photo CMP file parsing vulnerability (CVE-2020-17428) allows information disclosure via a CMP data handling flaw that can read past the end of an allocated structure. Evidence from ZDI-20-1339 confirms an out-of-bounds read, enabling leakage when a user visits a malicious page or ope...
CVE-2020-17429
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...