CVE-2018-14296

Foxit Reader Circle Annotation use-after-free remote-code-execution vulnerability (CVE-2018-14296) affects Foxit Reader 9.0.1.5096 and earlier; exploits require user interaction (open a malicious file/page). The flaw lies in processing Circle annotations, where a pointer can be reused after free,...

CVE-2018-11619

CVE-2018-11619 affects Foxit Reader. The vulnerability lies in the handling of the setFocus method where an object’s existence is not validated before operations, enabling a remote attacker to execute arbitrary code in the context of the current process. Exploitation requires user interaction (vi...

CVE-2018-14254

CVE-2018-14254 affects Foxit Reader (notably 9.0.1.1049) where a type confusion in the getLinks method can be triggered by JavaScript on a malicious page or file, allowing remote code execution under the process context. Multiple connected sources corroborate a getLinks-based type confusion with ...

CVE-2018-14271

The CVE-2018-14271 entry describes a type-confusion remote code execution in Foxit Reader, caused by the removeField method. The flaw allows code execution in the current process context and requires user interaction (visiting a malicious page or opening a malicious file). Affected products inclu...

CVE-2018-14266

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-14271

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-14264

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit Reader < 9.2 Multiple Vulnerabilities

The version of Foxit Reader installed on the remote Windows host is prior to 9.2. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111377; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate",...

Foxit Reader XFA ONOFBOY Type Obfuscation Remote Code Execution Vulnerability

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A type-obfuscated remote code execution vulnerability exists in the handling of the oneOfChild attribute in Foxit Reader 9.1.0.5096 and earlier versions for Windows platforms,...

Foxit Reader ExpaseFDF Arbitrary File Writing Remote Code Execution Vulnerability

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A security vulnerability exists in the 'exportAsFDF XFA' function in Foxit Reader 9.1.0.5096 and earlier versions for Windows based platforms, which stems from the program not...

Foxit Reader Memory Misreference Vulnerability (CNVD-2018-14450)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of events in Foxit Reader 9.1.0.5096 and earlier versions for Windows platforms, where the program fails to verify the...

Foxit Reader ReSETFABLE Type Obfuscation Remote Code Execution Vulnerability

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A type-obfuscated remote code execution vulnerability exists in the resetForm method of Foxit Reader 9.1.0.5096 and earlier versions for Windows. A remote attacker can exploit...

Foxit Reader Buffer Overflow Vulnerability (CNVD-2018-13985)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A heap-based buffer overflow vulnerability exists in the parsing of PDF documents in Foxit Reader 9.1.0.5096 and earlier versions for Windows platforms, where the program fails ...

Foxit Reader Memory Misreference Vulnerability (CNVD-2018-14148)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of Link objects in Foxit Reader 9.1.0.5096 and earlier versions for Windows. A remote attacker can exploit this...

Foxit Reader Remote Code Execution Vulnerability (CNVD-2018-14068)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A security vulnerability exists in the handling of the FlateDecode stream in Foxit Reader for Windows 9.1.0.5096 and earlier versions, where the program does not properly...

Foxit Reader setFocus Type Obfuscation Remote Code Execution Vulnerability

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A type-obfuscated remote code execution vulnerability exists in the handling of parameters passed into the 'setFocus' function in Foxit Reader 9.1.0.5096 and earlier versions fo...

Foxit Reader Memory Misreference Vulnerability

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of FileAttachment annotations in Foxit Reader 9.1.0.5096 and earlier versions for Windows. A remote attacker can explo...

Foxit Reader Memory Misreference Vulnerability (CNVD-2018-14149)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference exists in the handling of button objects in Foxit Reader 9.1.0.5096 and earlier versions for Windows. A remote attacker can exploit this vulnerability by...

Foxit Reader Memory Misreference Vulnerability (CNVD-2018-14150)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of PolyLine annotations in Foxit Reader 9.1.0.5096 and earlier versions for Windows. A remote attacker can exploit thi...

Foxit Reader Memory Misreference Vulnerability (CNVD-2018-14146)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of the 'SeedValue Generic Object' parameter passed to the 'signatureSetSeedValue' function in Foxit Reader 9.1.0.5096...