PT-2021-22219

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 10.1.4 Foxit PhantomPDF versions prior to 10.1.4 Description An issue allows attackers to delete arbitrary files during uninstallation via a symlink. Recommendations For Foxit Reader versions prior to 10.1.4,...

Foxit Reader和Foxit PhantomPDF 安全漏洞

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. An arbitrary file write vulnerability exists in Foxit Reader versions prior to 10.1.4 and PhantomPDF versions prior to 10.1.4, which stems from a failure to validate the CombineFiles pathname and can be...

CVE-2021-33794: Undefined Security Weakness

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA form interaction...

PT-2021-22222

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 10.1.4 Description An issue allows writing to arbitrary files because a CombineFiles pathname is not validated. Recommendations For Foxit Reader and PhantomPDF versions prior to 10.1.4, update to...

Foxit Reader和Foxit PhantomPDF 后置链接漏洞

Foxit Reader and Foxit PhantomPDF are both PDF document readers from Foxit, a Chinese company. Foxit Reader and PhantomPDF versions prior to 10.1.4 have a security vulnerability that could be exploited to corrupt memory during the conversion of PDF documents to a different document format...

Foxit Reader和Foxit PhantomPDF SQL注入漏洞

Foxit Reader and Foxit PhantomPDF are both PDF document readers from the Chinese company Foxit. A SQL injection vulnerability exists in Foxit Reader and PhantomPDF versions prior to 10.1.4. The vulnerability stems from a lack of validation of externally-entered SQL statements in database-based...

Foxit Reader和Foxit PhantomPDF 安全漏洞

Foxit Reader and Foxit PhantomPDF are both PDF document readers from the Chinese company Foxit. A security vulnerability exists in Foxit Reader and PhantomPDF versions prior to 10.1.4, which stems from the application allowing arbitrary files to be written because the extractPages pathname is not...

Foxit Reader和Foxit PhantomPDF 代码问题漏洞

Foxit Reader and Foxit PhantomPDF are both PDF document readers from the Chinese company Foxit. A security vulnerability exists in Foxit Reader and PhantomPDF versions prior to 10.1.4, which stems from the application allowing DLL hijacking...

PT-2021-22218

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 10.1.4 Description An issue was discovered that allows stack consumption via recursive function calls during the handling of XFA forms or link objects. Recommendations For Foxit Reader and PhantomP...

Foxit Reader 安全漏洞

Foxit Reader is a PDF document reader from the Chinese company Foxit. A security vulnerability exists in Foxit Reader versions prior to 10.1.4 and PhantomPDF versions prior to 10.1.4, which stems from the software's incorrect handling of the Tab key during XFA form interactions, resulting in...

PT-2021-22220

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 10.1.4 PhantomPDF versions prior to 10.1.4 Description The issue allows DLL hijacking. Recommendations For Foxit Reader versions prior to 10.1.4, update to version 10.1.4 or later. For PhantomPDF versions prior t...

CVE-2021-33793: Out-of-bounds Write

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document conversion...

PT-2021-22221

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 10.1.4 Description The issue allows writing to arbitrary files due to the lack of validation of the extractPages pathname. Recommendations For Foxit Reader and PhantomPDF versions prior to 10.1.4,...

PT-2021-6063 · Foxit · Foxit Phantompdf +2

Name of the Vulnerable Software and Affected Versions: Foxit Reader affected versions not specified Foxit PhantomPDF affected versions not specified Foxit PDF Editor affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing a remote attacker to...

Foxit Reader和Foxit PhantomPDF 安全漏洞

Foxit Reader and Foxit PhantomPDF are both PDF document readers from Foxit, a Chinese company. Foxit Reader and PhantomPDF versions prior to 10.1.4 contain a security vulnerability that could be exploited by an attacker to invoke the stack via a recursive function during the processing of XFA for...

Foxit Reader和Foxit PhantomPDF 缓冲区错误漏洞

Foxit Reader and Foxit PhantomPDF are both PDF document readers from the Chinese company Foxit. A security vulnerability exists in Foxit Reader versions prior to 10.1.4 and PhantomPDF versions prior to 10.1.4, which stems from the software's mishandling of cross-reference tables during the...

CVE-2021-38574: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows SQL Injection via crafted data at the end of a string...

CVE-2021-38571: Uncontrolled Search Path Element

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows DLL hijacking, aka CNVD-C-2021-68000 and CNVD-C-2021-68502...

CVE-2021-38573: Undefined Security Weakness

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname is not validated...

PT-2021-20322

Name of the Vulnerable Software and Affected Versions: Foxit Reader versions prior to 10.1.4 PhantomPDF versions prior to 10.1.4 Description: The issue arises from the mishandling of the Cross-Reference table during Office document conversion, leading to an out-of-bounds write. Recommendations: F...