Foxit Reader ConvertToPDF JPG File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within ConvertToPDFx86.dll...

PT-2019-18319 · Foxit · Foxit Reader

Name of the Vulnerable Software and Affected Versions: Foxit Reader version 9.3.10826 Description: This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fla...

Foxit Reader ConvertToPDF JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within ConvertToPDFx86.dll...

PT-2019-18317 · Foxit · Foxit Reader

Name of the Vulnerable Software and Affected Versions: Foxit Reader version 9.4.16811 Description: This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fla...

Foxit Reader localFileStorage Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the localFileStorag...

Foxit Reader ConvertToPDF BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within ConvertToPDFx86.dll...

Foxit Reader AcroForm richValue Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...

Using Foxit Reader PDF Printer to achieve provided the right-vulnerability warning-the black bar safety net

Last year, I wrote an article about the Foxit Reader, tap the UAF vulnerability of the process, and how to exploit the vulnerability remote code execution attacks. After that, I'm in one of the articles described in Foxit Reader SDK ActiveX in a command injection vulnerability. The spirit does no...

KLA11469 Multiple vulnerabilities in Foxit Reader

Multiple race condition vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code. Original advisories Security bulletins Exploitation Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details...

Binary Vulnerability in Foxit Reader U3D Plugin

Foxit Software Incorporated Foxit Software is a provider of product technology and solutions that cover the document lifecycle, including document generation, conversion, display, editing, searching, printing, storage, signing, forms, protection, and secure distribution management. Binary...

Foxit Reader Out-of-Bounds Read Vulnerability (CNVD-2019-08306)

Foxit Reader is a PDF document reader from Foxit China. An out-of-bounds read vulnerability exists in the Foxit Reader setInterval method of handling PDF files, which allows remote attackers to exploit the vulnerability by submitting a special request for a file that could crash the application o...

Foxit Reader and PhantomPDF Input Validation Vulnerability

Foxit Reader for Windows is China's Foxit Foxit software company's a Windows-based platform for PDF document reader. PhantomPDF for Windows is its commercial version. An input validation vulnerability exists in the HTML to PDF conversion process in Foxit Reader 9.3.0.10826 and earlier versions fo...

Foxit Reader setInterval Method Memory Misreference Vulnerability

Foxit Reader is a PDF document reader from Foxit China. A memory misreference vulnerability exists in the Foxit Reader setInterval method of handling PDF files, which allows remote attackers to exploit the vulnerability by submitting a special request for a file that could crash the application o...

Foxit Reader and PhantomPDF Memory Misreference Vulnerability (CNVD-2019-08302)

Foxit Reader for Windows is China's Foxit Foxit software company's a Windows-based platform for PDF document reader. PhantomPDF for Windows is its commercial version. A memory misreference vulnerability exists in the popUpMenu method in Foxit Reader 9.3.0.10826 and earlier versions for Windows an...

Foxit Reader and PhantomPDF Information Disclosure Vulnerability (CNVD-2019-08304)

Foxit Reader for Windows is China's Foxit Foxit software company's a Windows-based platform for PDF document reader. PhantomPDF for Windows is its commercial version. An information disclosure vulnerability exists in the processing of the AFParseDateEx method in Foxit Reader 9.3.0.10826 and earli...

Foxit Reader Out-of-Bounds Read Vulnerability

Foxit Reader is a PDF document reader from Foxit China. An out-of-bounds read vulnerability exists in Foxit Reader's handling of PDF files, which allows remote attackers to exploit the vulnerability by submitting a special file request that could obtain sensitive information or crash the...

Foxit Reader and PhantomPDF Memory Misreference Vulnerability (CNVD-2019-08300)

Foxit Reader for Windows is China's Foxit Foxit software company's a Windows-based platform for PDF document reader. PhantomPDF for Windows is its commercial version. A memory misreference vulnerability exists in the XFA remerge method in Foxit Reader 9.3.0.10826 and earlier versions for Windows...

Foxit Reader and PhantomPDF Out-of-Bounds Read Vulnerability

Foxit Reader for Windows is China's Foxit Foxit software company's a Windows-based platform for PDF document reader. PhantomPDF for Windows is its commercial version. An out-of-bounds read vulnerability exists in the processing of PDF files in Foxit Reader 9.3.0.10826 and earlier versions for...

Foxit Reader and PhantomPDF Input Validation Vulnerability (CNVD-2019-08301)

Foxit Reader for Windows is China's Foxit Foxit software company's a Windows-based platform for PDF document reader. PhantomPDF for Windows is its commercial version. An input validation vulnerability exists in the processing of PDF files in Foxit Reader 9.3.0.10826 and earlier versions and...

CVE-2019-6735

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...