Foxit Reader and Foxit PhantomPDF Remote Code Execution Vulnerability

Foxit Reader is a PDF document reader.Foxit PhantomPDF is a commercial version. When using Foxit Reader or Foxit PhantomPDF to open a carefully constructed PDF file, there is a security vulnerability that can be exploited by an attacker to remotely execute arbitrary code...

Foxit Reader XFA Page prePrint Event Memory Error References Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of the Page prePrint event, which could allow the reuse of a pointer that has already been released in the hanging pointer. An attacker could execute arbitrary code in the...

PT-2016-5833

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 7.3.4 PhantomPDF versions prior to 7.3.4 Description The issue is related to a use-after-free vulnerability in the XFA forms handling functionality. This allows remote attackers to execute arbitrary code via a...

PT-2016-5834

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 7.3.4 Description The issue allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted image, including JPEG, GIF, or BMP formats. This occurs when...

PT-2016-5828

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 7.3.4 PhantomPDF versions prior to 7.3.4 Description The issue is related to a use-after-free vulnerability that can be exploited by remote attackers to execute arbitrary code. This is achieved through a crafted...

Foxit Reader XFA preOpen Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

Foxit Reader XFA Page prePrint Event Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

Foxit Reader Fields Format Action Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the handling of fields. A...

Foxit Reader Revision Number Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of an...

Foxit Reader ConvertToPDF JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the ConvertToPDF...

Foxit Reader XFA remerge Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...

Foxit Reader ConvertToPDF GIF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the ConvertToPDF...

Foxit Reader FlateDecode Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within FlateDecode. A...

Foxit Reader Revision Number Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the object's revisi...

PT-2016-5832

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 7.3.4 PhantomPDF versions prior to 7.3.4 Description The issue is related to a use-after-free vulnerability that allows remote attackers to execute arbitrary code. This is achieved via an object with a revision...

Foxit Reader Global setPersistent Memory Error References Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. A security vulnerability exists in the global.setPersistent method of Foxit Reader. global.setPersistent forces a hanging pointer to be released and then reused when saving a global variable. An attacker can exploit this...

Foxit Reader GpRuntime::GpLock::GpLock Memory Misreference Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. A security vulnerability exists in the way Foxit Reader uses the Gdiplus API, constructing PDFs that force the use of suspended pointers that have been released in GpRuntime::GpLock::GpLock. An attacker could exploit this...

Foxit Reader and Foxit PhantomPDF integer overflow vulnerability (CNVD-2016-00916)

Foxit Reader is a PDF document reader.Foxit PhantomPDF is a commercial version. Foxit Reader and Foxit PhantomPDF have an integer overflow vulnerability that can be exploited by attackers to execute arbitrary code or cause a denial of service...

Foxit Reader XFA FormCalc replace Integer Overflow Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of XFA FormCalc. The constructed replace call triggers an integer overflow. An attacker can exploit this vulnerability to execute arbitrary code in the current process conte...

Foxit Reader and Foxit PhantomPDF Arbitrary Code Execution Vulnerability (CNVD-2016-00994)

Foxit Reader is a PDF document reader.Foxit PhantomPDF is a commercial version. Foxit Reader and Foxit PhantomPDF contain a security vulnerability that can be exploited by remote attackers to construct malicious files that can be parsed by the user, crashing the application or executing arbitrary...