PT-2020-10791

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF Mac version 3.3 Foxit Reader for Mac versions prior to 3.3 Description An issue was discovered that allows stack consumption due to interaction between ICC-Based color space and Alternate color space. Recommendations For Foxit...

PT-2020-10799

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.5 Foxit PhantomPDF versions prior to 9.5 Description An issue was discovered that involves homograph mishandling. Recommendations For Foxit Reader versions prior to 9.5, update to version 9.5 or later. For Foxi...

PT-2020-13688

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.2 PhantomPDF versions prior to 9.7.2 Description An issue allows information disclosure of a hardcoded username and password in the DocuSign plugin. Recommendations For Foxit Reader versions prior to 9.7.2,...

CVE-2019-20820: NULL Pointer Dereference

An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference during the parsing of file data...

CVE-2020-13809: Uncontrolled Resource Consumption

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via long strings in the content stream...

CVE-2020-13810: Improper Verification of Cryptographic Signature

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows signature validation bypass via a modified file or a file with non-standard signatures...

CVE-2020-13807: Loop with Unreachable Exit Condition

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has circular reference mishandling that causes a loop...

CVE-2020-13803: Improper Verification of Cryptographic Signature

An issue was discovered in Foxit PhantomPDF Mac and Foxit Reader for Mac before 4.0. It allows signature validation bypass via a modified file or a file with non-standard signatures...

CVE-2020-13814: Use After Free

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It has a use-after-free via a document that lacks a dictionary...

CVE-2020-13804: Use of Hard-coded Credentials

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows information disclosure of a hardcoded username and password in the DocuSign plugin...

CVE-2019-20828: Buffer Copy without Checking Size of Input

An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs...

CVE-2019-20829: NULL Pointer Dereference

An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a NULL pointer dereference via FXSYSwcslen in an Epub file...

CVE-2019-20830: Out-of-bounds Write

An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has an out-of-bounds write when Internet Explorer is used...

CVE-2018-21239: Insufficiently Protected Credentials

An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows NTLM credential theft via a GoToE or GoToR action...

CVE-2019-20822: Out-of-bounds Write

An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.7.0.29430. It has an out-of-bounds write via incorrect image data...

PT-2020-13692

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7.2 Description An issue allows resource consumption via crafted cross-reference stream data. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.7.2, update to version 9.7.2 or...

PT-2020-13689

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.2 PhantomPDF versions prior to 9.7.2 Description The issue is related to brute-force attack mishandling due to the CAS service lacking a limit on login failures. Recommendations For Foxit Reader versions prio...

CVE-2020-13806: Use After Free

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has a use-after-free because of JavaScript execution after a deletion or close operation...

CVE-2018-21236: NULL Pointer Dereference

An issue was discovered in Foxit Reader before 2.4.4. It has a NULL pointer dereference...

PT-2020-8880

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 2.4.4 Description An issue was discovered in Foxit Reader, which has a NULL pointer dereference. Recommendations For versions prior to 2.4.4, update to version 2.4.4 or later to resolve the issue...