CVE-2020-17427

Foxit Studio Photo 3.6.6.922 is affected by CVE-2020-17427, due to an out-of-bounds read in NEF file processing caused by insufficient validation of user-supplied data. The vulnerability allows remote code execution and requires user interaction (the target must visit a malicious page or open a m...

CVE-2020-17427

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17426

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17426

CVE-2020-17426 affects Foxit Studio Photo 3.6.6.922 and earlier, where the vulnerability lies in handling CR2 files. The issue stems from insufficient validation of user-supplied data during CR2 file parsing, leading to a memory corruption condition. Exploitation requires user interaction (target...

CVE-2020-17425

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17425

CVE-2020-17425 affects Foxit Studio Photo (reported as 3.6.6.922 and earlier). The root cause is improper validation during EPS file parsing, causing a write past the end of an allocated structure. This leads to remote code execution in the context of the current process. Exploitation requires us...

CVE-2020-17424

Foxit Studio Photo 3.6.6.922 and earlier are affected by an EZI file parsing flaw that allows out-of-bounds write due to insufficient input validation. This can let remote attackers execute arbitrary code in the context of the vulnerable process. User interaction is required (visit a malicious pa...

CVE-2020-17424

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17423

Foxit Studio Photo 3.6.6.922 is affected by a heap-based buffer overflow in ARW file parsing. The root cause is improper validation of the length of user-supplied data before copying to a heap buffer, enabling remote code execution when a user opens a malicious ARW file or visits a crafted page. ...

CVE-2020-17422

Foxit Studio Photo information disclosure (CVE-2020-17422) stems from improper validation in EPS file parsing, causing an out-of-bounds read of an allocated structure. Affected versions include Foxit Studio Photo 3.6.6.x; an attacker must lure a user to open a malicious page/file, enabling inform...

CVE-2020-17420

Foxit Studio Photo NEF handling in version 3.6.6.922 is affected by an out-of-bounds read due to insufficient input validation, leading to information disclosure. Exploitation requires user interaction (visiting a malicious page or opening a malicious file) and, per the description, an attacker c...

CVE-2020-17420

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-17421

Foxit Studio Photo vulnerable to remote code execution via NEF file parsing (CVE-2020-17421). The flaw is an out-of-bounds write due to improper validation in handling NEF data, allowing code execution in the context of the current process when a user visits a malicious page or opens a crafted fi...

CVE-2020-17421

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17419

Foxit Studio Photo CVE-2020-17419 affects Foxit Studio Photo 3.6.6.922 (CNVD notes 3.6.6.930 and earlier). The issue is an out-of-bounds write in NEF file parsing due to improper validation of user-supplied data, allowing remote code execution. Exploitation requires user interaction (visiting a m...

CVE-2020-17418

Foxit Studio Photo EZIX channel id out-of-bounds write vulnerability (CVE-2020-17418) affects Foxit Studio Photo 3.6.6.922 and earlier. The flaw occurs in EZIX file handling where a crafted id in a channel element triggers a write past the end of an allocated buffer, enabling arbitrary code execu...

Foxit Studio Photo 缓冲区错误漏洞

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A remote code execution vulnerability exists in the handling of EZI files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a lack of proper validation of user-supplied dat...

Foxit Studio Photo 缓冲区错误漏洞

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. An information disclosure vulnerability exists in the handling of CMP files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a lack of proper validation of user-supplied...

Foxit Studio Photo 缓冲区错误漏洞

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. An information disclosure vulnerability exists in the handling of EPS files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a lack of proper validation of user-supplied...

Foxit Studio Photo 缓冲区错误漏洞

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A remote code execution vulnerability exists in the handling of EZIX files in Foxit Studio Photo 3.6.6.930 and earlier versions. An attacker can exploit this vulnerability by tricking a user into visiting ...