CVE-2021-38563: Improper Validation of Array Index

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It mishandles situations in which an array size derived from a /Size entry is smaller than the maximum indirect object number, and thus there is an attempted incorrect array access leading to a NULL pointer...

Foxit PDF Reader和Foxit PDF Editor 缓冲区错误漏洞

Foxit PDF Reader and Foxit PDF Editor are both products of Foxit Corporation, a Chinese company. Foxit PDF Reader is a PDF reader and Foxit PDF Editor is a PDF editor. Versions prior to 11.0.1 have a security vulnerability that can be exploited to allow out-of-bounds reading via util.scan...

Foxit Reader和Foxit PhantomPDF 安全漏洞

Foxit Reader and Foxit PhantomPDF are both PDF document readers from Foxit, a Chinese company. Foxit Reader and PhantomPDF versions prior to 10.1.4 contain a security vulnerability that could be exploited by an attacker to invoke the stack via a recursive function during the processing of XFA for...

Foxit Reader和Foxit PhantomPDF 缓冲区错误漏洞

Foxit Reader and Foxit PhantomPDF are both PDF document readers from the Chinese company Foxit. A security vulnerability exists in Foxit Reader versions prior to 10.1.4 and PhantomPDF versions prior to 10.1.4, which stems from the software's mishandling of cross-reference tables during the...

CVE-2021-38564: Out-of-bounds Read

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows an out-of-bounds read via util.scand...

CVE-2021-38569: Uncontrolled Recursion

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms or link objects...

CVE-2021-38566: Uncontrolled Recursion

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows stack consumption during recursive processing of embedded XML nodes...

CVE-2021-38574: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows SQL Injection via crafted data at the end of a string...

CVE-2021-38565: Undefined Security Weakness

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows writing to arbitrary files via submitForm...

CVE-2021-38571: Uncontrolled Search Path Element

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows DLL hijacking, aka CNVD-C-2021-68000 and CNVD-C-2021-68502...

CVE-2021-38573: Undefined Security Weakness

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname is not validated...

CVE-2021-38567: NULL Pointer Dereference

An issue was discovered in Foxit PDF Editor before 11.0.1 and PDF Reader before 11.0.1 on macOS. It mishandles missing dictionary entries, leading to a NULL pointer dereference, aka CNVD-C-2021-95204...

PT-2021-20322

Name of the Vulnerable Software and Affected Versions: Foxit Reader versions prior to 10.1.4 PhantomPDF versions prior to 10.1.4 Description: The issue arises from the mishandling of the Cross-Reference table during Office document conversion, leading to an out-of-bounds write. Recommendations: F...

Foxit Reader和Foxit PhantomPDF 缓冲区错误漏洞

Foxit Reader and Foxit PhantomPDF are both PDF document readers from Foxit, a Chinese company. Foxit Reader and PhantomPDF versions prior to 10.1.4 have a security vulnerability that could be exploited to corrupt memory during the conversion of PDF documents to a different document format...

PT-2021-22214

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader versions prior to 11.0.1 Foxit PDF Editor versions prior to 11.0.1 Description The issue allows writing to arbitrary files via the submitForm function. This can potentially lead to unauthorized modifications of files on the...

PT-2021-22223

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 10.1.4 Foxit PhantomPDF versions prior to 10.1.4 Description The issue allows SQL Injection via crafted data at the end of a string. Recommendations For Foxit Reader versions prior to 10.1.4, update to version...

PT-2021-20323

Name of the Vulnerable Software and Affected Versions: Foxit Reader versions prior to 10.1.4 PhantomPDF versions prior to 10.1.4 Description: The issue allows information disclosure or an application crash after mishandling the Tab key during XFA form interaction. Recommendations: For Foxit Reade...

Foxit PDF Reader和Foxit PDF Editor 安全漏洞

Foxit PDF Reader and Foxit PDF Editor are both products of Foxit China. Foxit PDF Reader is a PDF reader and Foxit PDF Editor is a PDF editor. A security vulnerability exists in versions prior to 11.0.1, which can be exploited to allow an attacker to write arbitrary files via submitForm...

PT-2021-22213

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader versions prior to 11.0.1 Foxit PDF Editor versions prior to 11.0.1 Description The issue allows an out-of-bounds read, which can be used by attackers to disclose sensitive information or cause a denial of service, resulting in...

CVE-2021-38572: Undefined Security Weakness

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because the extractPages pathname is not validated...