Lucene search
+L

6555 matches found

CNVD
CNVD
•added 2018/04/28 12:00 a.m.•19 views

Foxit Reader XFA layout remote code execution vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the XFA layout element, which can be exploited by an attacker to execute arbitrary code in the current process context due to a lack of proper validation of user-supplied data...

8.8CVSS7.7AI score0.03072EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2018/04/27 12:00 a.m.•42 views

Foxit Reader < 9.1 Multiple Vulnerabilities

The version of Foxit Reader installed on the remote Windows host is prior to 9.1. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109399; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

8.8CVSS7.3AI score0.03503EPSS
SaveExploits8References6
CNVD
CNVD
•added 2018/04/25 12:00 a.m.•34 views

Foxit Reader Remote Code Execution Vulnerability (CNVD-2018-08267)

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A remote code execution vulnerability exists in Foxit Reader version 9.0.1.1049. A remote attacker can exploit this vulnerability to execute arbitrary code or cause a denial of service with a specially crafted PDF...

8.8CVSS8.5AI score0.03314EPSS
SaveExploits2References1
OpenVAS
OpenVAS
•added 2018/04/25 12:00 a.m.•76 views

Foxit Reader Portable Detection (Windows SMB Login)

SMB login and WMI file search based detection of Foxit Reader Portable. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2018/04/25 12:00 a.m.•93 views

Foxit Reader Multiple Vulnerabilities (Apr 2018) - Windows

Foxit Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:foxitsoftware:reader";...

8.8CVSS8.7AI score0.63072EPSS
SaveExploits36References3
CNVD
CNVD
•added 2018/04/25 12:00 a.m.•15 views

Foxit Reader and PhantomPDF Memory Misreference Vulnerability (CNVD-2018-08295)

Foxit Reader is a Chinese Foxit Foxit software company of a PDF document reader.PhantomPDF is a commercial version. A memory misreference vulnerability exists in Foxit Reader versions prior to 9.1 and PhantomPDF versions prior to 9.1. A remote attacker can exploit this vulnerability to execute...

7.8CVSS7.4AI score0.03137EPSS
SaveExploits1References1
OSV
OSV
•added 2018/04/24 8:29 p.m.•8 views

CVE-2017-17557

In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of the BITMAPINFOHEADER record in BMP files. The issue results from the lack of proper validation of the biSize member, which can result in a heap based buffer overflow. An attacker can leverage this to...

8.8CVSS6.3AI score0.03503EPSS
SaveExploits1References4
Prion
Prion
•added 2018/04/24 8:29 p.m.•26 views

Heap overflow

In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of the BITMAPINFOHEADER record in BMP files. The issue results from the lack of proper validation of the biSize member, which can result in a heap based buffer overflow. An attacker can leverage this to...

6.8CVSS8.8AI score0.03503EPSS
SaveExploits1References4Affected Software2
Cvelist
Cvelist
•added 2018/04/24 8:00 p.m.•35 views

CVE-2017-17557

In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of the BITMAPINFOHEADER record in BMP files. The issue results from the lack of proper validation of the biSize member, which can result in a heap based buffer overflow. An attacker can leverage this to...

8.8AI score0.03503EPSS
SaveExploits1References4
CVE
CVE
•added 2018/04/24 8:00 p.m.•91 views

CVE-2017-17557

CVE-2017-17557: Foxit Reader &lt; 9.1 and Foxit PhantomPDF

8.8CVSS8.7AI score0.03503EPSS
SaveExploits1References4Affected Software2
CNVD
CNVD
•added 2018/04/24 12:00 a.m.•16 views

Foxit Reader and PhantomPDF Memory Misreference Vulnerability (CNVD-2018-08293)

Foxit Reader is a Chinese Foxit Foxit software company of a PDF document reader.PhantomPDF is a commercial version. A memory misreference vulnerability exists in Foxit Reader versions prior to 9.1 and PhantomPDF versions prior to 9.1. A remote attacker can exploit this vulnerability to execute...

8.8CVSS7.4AI score0.02496EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/24 12:00 a.m.•6 views

CVE-2017-17557: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of the BITMAPINFOHEADER record in BMP files. The issue results from the lack of proper validation of the biSize member, which can result in a heap based buffer overflow. An attacker can leverage this to...

8.8CVSS8.3AI score0.03503EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/04/24 12:00 a.m.•3 views

PT-2018-6534

Name of the Vulnerable Software and Affected Versions: Foxit Reader versions prior to 9.1 Foxit PhantomPDF versions prior to 9.1 Description: A flaw exists in the parsing of the BITMAPINFOHEADER record in BMP files due to the lack of proper validation of the biSize member. This can result in a...

8.8CVSS6.2AI score0.03503EPSS
SaveExploits1References6
Prion
Prion
•added 2018/04/23 11:29 p.m.•22 views

Design/Logic Flaw

A use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to execute arbitrary code, aka iDefense ID V-y0nqfutlf3...

6.8CVSS8.9AI score0.02496EPSS
SaveExploits1References2Affected Software2
NVD
NVD
•added 2018/04/23 11:29 p.m.•36 views

CVE-2018-10303

A use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to execute arbitrary code, aka iDefense ID V-y0nqfutlf3...

8.8CVSS9AI score0.02496EPSS
SaveExploits1References2
OSV
OSV
•added 2018/04/23 11:29 p.m.•5 views

CVE-2018-10303

A use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to execute arbitrary code, aka iDefense ID V-y0nqfutlf3...

8.8CVSS6AI score0.02496EPSS
SaveExploits1References2
CVE
CVE
•added 2018/04/23 11:00 p.m.•80 views

CVE-2018-10303

Foxit Reader and Foxit PhantomPDF before 9.1 are affected by a use-after-free vulnerability in Foxit’s PDF software that can allow remote code execution. The CVE-2018-10303 description ties to iDefense ID V-y0nqfutlf3. The connected documents do not provide exploitation details or a confirmed pat...

8.8CVSS8.8AI score0.02496EPSS
SaveExploits1References2Affected Software2
Cvelist
Cvelist
•added 2018/04/23 11:00 p.m.•39 views

CVE-2018-10303

A use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to execute arbitrary code, aka iDefense ID V-y0nqfutlf3...

8.9AI score0.02496EPSS
SaveExploits1References2
OSV
OSV
•added 2018/04/23 7:29 p.m.•7 views

CVE-2018-10302

A use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to execute arbitrary code, aka iDefense ID V-jyb51g3mv9...

7.8CVSS6AI score0.03137EPSS
SaveExploits1References2
Prion
Prion
•added 2018/04/23 7:29 p.m.•24 views

Design/Logic Flaw

A use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to execute arbitrary code, aka iDefense ID V-jyb51g3mv9...

6.8CVSS8AI score0.03137EPSS
SaveExploits1References2Affected Software2
Rows per page
Query Builder