5431 matches found
CVE-2017-10945
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2017-10953
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2017-10941
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2017-10943
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2017-10953
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2017-10948
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.1.6871. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2017-10945
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2017-10946
Foxit Reader CVE-2017-10946 affects Foxit Reader prior to 8.2.1.6871. The flaw is in the setItem function, caused by not validating the existence of an object before operating on it, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a mal...
CVE-2017-10942
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2017-10942
CVE-2017-10942 affects Foxit Reader (and related Foxit PDF tools) prior to 8.3.1, including 8.3.0.14878. The flaw is an out-of-bounds read during PDF parsing that can cause disclosure of sensitive data by reading past the end of an allocated object. Exploitation requires user interaction (e.g., v...
CVE-2017-10947
CVE-2017-10947 affects Foxit Reader 8.2.1.6871 and Foxit PhantomPDF prior to 8.3.1, where a use-after-free in the print() function arises from not validating object existence before operations. This allows remote code execution under the process context when a user opens a crafted document or vis...
CVE-2017-10944
Foxit Reader 8.3.0.14878 and earlier is affected by CVE-2017-10944 due to an out-of-bounds read in the ObjStm object parsing. The flaw stems from improper validation of input data, enabling an information disclosure vulnerability when a user opens a malicious PDF or visits a crafted page; exploit...
CVE-2017-10943
CVE-2017-10943 affects Foxit Reader 8.3.0.14878 and earlier. The issue arises from PDF parsing and improper validation, causing an out-of-bounds read (read past the end of an allocated object) that can disclose sensitive information. Exploitation described in sources involves a user-assisted vect...
CVE-2017-10941
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2017-10947
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.1.6871. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the prin...
CVE-2017-10946
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.1.6871. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2017-10944
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2017-10943
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2017-10948
CVE-2017-10948 affects Foxit Reader (v8.2.1.6871) and is caused by a failure to validate an object before operations in app.execMenuItem, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a crafted file). Multiple connected sources (OpenV...
CVE-2017-10945
Foxit Reader 8.3.0.14878 (and earlier) is affected by CVE-2017-10945 due to a use-after-free in the app.alert function caused by not validating an object before operations. This enables remote code execution with user interaction required (target must open a malicious file/page). Related advisori...