CVE-2018-16295

Summary (CVE-2018-16295): A use-after-free in Foxit Reader/PhantomPDF JavaScript engine (versions before 9.3) can be triggered by a specially crafted PDF, leading to arbitrary code execution. The attacker must persuade the user to open the malicious PDF; if a browser plugin is enabled, visiting a...

CVE-2018-16291

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16292, CVE-2018-16293, CVE-2018-16294, CVE-2018-16295, CVE-2018-16296, and CVE-2018-16297. A specially crafted PDF document can...

Foxit Reader for Windows 'setInterval()' Method Memory Misreference Vulnerability

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of the 'setInterval' method in Foxit Reader 9.2.0.9297 and earlier versions for Windows platforms, which stems from th...

Foxit Reader for Windows Memory Misreference Vulnerability (CNVD-2018-20654)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of OCG objects in Foxit Reader 9.2.0.9297 and earlier versions for Windows platforms, where the program fails to detec...

Foxit Reader for Windows Memory Misreference Vulnerability (CNVD-2018-20653)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of the Format event in Foxit Reader 9.2.0.9297 and earlier versions for Windows platforms, where the program fails to...

Foxit Reader and PhantomPDF Information Disclosure Vulnerability (CNVD-2018-20679)

Foxit Reader is a PDF document reader from China's Foxit Software Corporation.Foxit PhantomPDF is a commercial version. Foxit Reader and PhantomPDF 9.3 before the version of the information leakage vulnerability, the vulnerability stems from the program fails to properly create the ArrayBuffer an...

PT-2018-16357 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader version 9.2.0.9297 Description: A use-after-free issue in the JavaScript engine of Foxit PDF Reader can be exploited by opening a specially crafted PDF document, potentially leading to arbitrary code execution. An attacker mu...

Foxit Reader for Windows Memory Misreference Vulnerability (CNVD-2018-20650)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of the Mouse Exit event in Foxit Reader 9.2.0.9297 and earlier versions for Windows platforms, where the program fails...

PT-2018-16332 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader version 9.1.0.5096 Description: A use-after-free issue exists in the JavaScript engine, allowing a specially crafted PDF document to trigger the reuse of a previously freed object in memory. This can be exploited if an attack...

Foxit Reader for Windows Memory Misreference Vulnerability (CNVD-2018-20648)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of the Selection Change event in Foxit Reader 9.2.0.9297 and earlier versions for Windows platforms, where the program...

Foxit Reader for Windows Buffer Overflow Vulnerability

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. An out-of-bounds read vulnerability exists in the handling of the Calculate event in Foxit Reader 9.2.0.9297 and earlier versions for Windows platforms, where the program fails ...

Foxit Reader for Windows Memory Misreference Vulnerability

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of the Calculate event in Foxit Reader 9.2.0.9297 and earlier versions for Windows platforms, where the program fails ...

Foxit Reader for Windows Memory Misreference Vulnerability (CNVD-2018-20647)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of the Validate event in Foxit Reader 9.2.0.9297 and earlier versions for Windows platforms, where the program fails t...

PT-2018-16333 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader version 9.1.0.5096 Description: A use-after-free issue in the JavaScript engine of Foxit PDF Reader can be exploited by opening a specially crafted PDF document, allowing arbitrary code execution. This can happen when a...

PT-2018-16337 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader version 9.1.0.5096 Description: A use-after-free issue in the JavaScript engine of Foxit PDF Reader can be exploited by opening a specially crafted PDF document, allowing arbitrary code execution. This can happen when a...

Foxit Reader for Windows Memory Misreference Vulnerability (CNVD-2018-20649)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of the onBlur event in Foxit Reader 9.2.0.9297 and earlier versions for Windows platforms, where the program fails to...

Foxit Reader for Windows Memory Misreference Vulnerability (CNVD-2018-20655)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of Link objects in Foxit Reader 9.2.0.9297 and earlier versions for Windows platforms, where the program fails to dete...

Foxit Reader JavaScript XFA Use After Free (CVE-2018-3850)

A use after free vulnerability exists in Foxit Reader. This vulnerability is due to improper handling of freed JavaScript XML Forms Architecture objects...

CVE-2018-3967

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the...

CVE-2018-3993

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the...