PT-2021-6060 · Foxit · Foxit Pdf Editor

Name of the Vulnerable Software and Affected Versions: Foxit PDF Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicio...

PT-2021-22219

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 10.1.4 Foxit PhantomPDF versions prior to 10.1.4 Description An issue allows attackers to delete arbitrary files during uninstallation via a symlink. Recommendations For Foxit Reader versions prior to 10.1.4,...

Foxit PDF Reader和Foxit PDF Editor 输入验证错误漏洞

Foxit PDF Reader and Foxit PDF Editor are both products of Foxit China, a PDF reader, and Foxit PDF Editor, a PDF editor. stems from mistakenly handling the case where the array size is smaller than the maximum number of indirect objects, and an attacker can exploit the vulnerability to cause NUL...

Foxit Reader和Foxit PhantomPDF 安全漏洞

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. An arbitrary file write vulnerability exists in Foxit Reader versions prior to 10.1.4 and PhantomPDF versions prior to 10.1.4, which stems from a failure to validate the CombineFiles pathname and can be...

CVE-2021-33794: Undefined Security Weakness

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA form interaction...

PT-2021-22212

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader versions prior to 11.0.1 Foxit PDF Editor versions prior to 11.0.1 Description The issue arises from incorrect handling of array sizes derived from a /Size entry, leading to situations where the array size is smaller than the...

PT-2021-6064 · Foxit · Foxit Pdf Editor

Name of the Vulnerable Software and Affected Versions: Foxit PDF Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability, where the...

PT-2021-22221

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 10.1.4 Description The issue allows writing to arbitrary files due to the lack of validation of the extractPages pathname. Recommendations For Foxit Reader and PhantomPDF versions prior to 10.1.4,...

PT-2021-22222

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 10.1.4 Description An issue allows writing to arbitrary files because a CombineFiles pathname is not validated. Recommendations For Foxit Reader and PhantomPDF versions prior to 10.1.4, update to...

PT-2021-22217

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 10.1.4 Description An issue was discovered that allows memory corruption during the conversion of a PDF document to a different document format. Recommendations For versions prior to 10.1.4, update...

Foxit Reader和Foxit PhantomPDF 后置链接漏洞

Foxit Reader and Foxit PhantomPDF are both PDF document readers from Foxit, a Chinese company. Foxit Reader and PhantomPDF versions prior to 10.1.4 have a security vulnerability that could be exploited to corrupt memory during the conversion of PDF documents to a different document format...

Foxit Reader和Foxit PhantomPDF SQL注入漏洞

Foxit Reader and Foxit PhantomPDF are both PDF document readers from the Chinese company Foxit. A SQL injection vulnerability exists in Foxit Reader and PhantomPDF versions prior to 10.1.4. The vulnerability stems from a lack of validation of externally-entered SQL statements in database-based...

Foxit Reader和Foxit PhantomPDF 安全漏洞

Foxit Reader and Foxit PhantomPDF are both PDF document readers from the Chinese company Foxit. A security vulnerability exists in Foxit Reader and PhantomPDF versions prior to 10.1.4, which stems from the application allowing arbitrary files to be written because the extractPages pathname is not...

Foxit Reader和Foxit PhantomPDF 代码问题漏洞

Foxit Reader and Foxit PhantomPDF are both PDF document readers from the Chinese company Foxit. A security vulnerability exists in Foxit Reader and PhantomPDF versions prior to 10.1.4, which stems from the application allowing DLL hijacking...

Foxit PDF Editor 代码问题漏洞

Foxit PDF Editor is a PDF editor from Foxit, a Chinese company. versions before Foxit PDF Reader 11.0.1 and PDF Editor 11.0.1 have a security vulnerability that stems from the application's incorrect handling of missing dictionary entries, which could be exploited by an attacker to cause NULL...

Foxit PDF Reader 资源管理错误漏洞

Foxit PDF Reader is a PDF reader from Foxit China. versions prior to Foxit PDF Reader 11.0.1 and PDF Editor 11.0.1 have a security vulnerability that can be exploited by attackers stemming from the application allowing the use of stacks during recursive processing of embedded XML nodes...

PT-2021-22218

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 10.1.4 Description An issue was discovered that allows stack consumption via recursive function calls during the handling of XFA forms or link objects. Recommendations For Foxit Reader and PhantomP...

Foxit Reader 安全漏洞

Foxit Reader is a PDF document reader from the Chinese company Foxit. A security vulnerability exists in Foxit Reader versions prior to 10.1.4 and PhantomPDF versions prior to 10.1.4, which stems from the software's incorrect handling of the Tab key during XFA form interactions, resulting in...

PT-2021-22220

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 10.1.4 PhantomPDF versions prior to 10.1.4 Description The issue allows DLL hijacking. Recommendations For Foxit Reader versions prior to 10.1.4, update to version 10.1.4 or later. For PhantomPDF versions prior t...

CVE-2021-33793: Out-of-bounds Write

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document conversion...