CVE-2018-19418

CVE-2018-19418 affects Foxit PDF ActiveX/SDK ActiveX prior to 5.5.1. Root cause: lack of security permission control leading to remote code execution via command injection. Exploitation notes vary across sources; SRC-2019-0009 indicates user interaction is required (user must open a malicious fil...

CVE-2018-19418

Foxit PDF ActiveX before 5.5.1 allows remote code execution via command injection because of the lack of a security permission control...

PT-2021-8838

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.5 PhantomPDF versions prior to 8.3.10 and 9.x prior to 9.5 Description The issue is related to a proxyPreviewAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read...

PT-2021-8839

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.5 PhantomPDF versions prior to 8.3.10 and 9.x prior to 9.5 Description The issue is related to a proxyCheckLicence race condition that can cause a stack-based buffer overflow or an out-of-bounds read. This...

PT-2021-8834

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.5 PhantomPDF versions prior to 8.3.10 and 9.x prior to 9.5 Description The issue is related to a proxyGetAppEdition race condition that can cause a stack-based buffer overflow or an out-of-bounds read...

PT-2021-8835

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.5 PhantomPDF versions prior to 8.3.10 and 9.x prior to 9.5 Description The issue is related to a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read. Recommendatio...

PT-2021-8840

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.5 PhantomPDF versions prior to 8.3.10 and 9.x prior to 9.5 Description The issue is caused by a race condition that can lead to a stack-based buffer overflow or an out-of-bounds read. Recommendations For Foxit...

PT-2021-8831

Name of the Vulnerable Software and Affected Versions Foxit PDF ActiveX versions prior to 5.5.1 Description The issue allows remote code execution via command injection due to the lack of a security permission control. Recommendations For versions prior to 5.5.1, update to version 5.5.1 or later ...

PT-2021-8841

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.5 PhantomPDF versions prior to 8.3.10 and 9.x prior to 9.5 Description The issue is related to a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read. This is a...

Foxit Reader和Foxit PhantomPDF 竞争条件问题漏洞

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker could exploit the vulnerability to cause a stack buffer overflow or an out-of-bounds read...

PT-2021-8837

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.5 PhantomPDF versions prior to 8.3.10 and 9.x prior to 9.5 Description The issue is related to a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read. This is a...

CVE-2018-20314: Out-of-bounds Read

Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCheckLicence race condition that can cause a stack-based buffer overflow or an out-of-bounds read...

CVE-2018-18688: Improper Verification of Cryptographic Signature

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or...

Foxit Reader和Foxit PhantomPDF 竞争条件问题漏洞

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker could exploit the vulnerability to cause a stack buffer overflow or an out-of-bounds read...

CVE-2018-20315: Concurrent Execution using Shared Resource with Improper Synchronization

Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a race condition that can cause a stack-based buffer overflow or an out-of-bounds read...

PT-2021-8830 · Wondershare +6 · Pdfelement6 Pro +10

Name of the Vulnerable Software and Affected Versions: Foxit Reader versions prior to 9.4 PhantomPDF versions prior to 8.3.9 and 9.x prior to 9.4 eXpert PDF 12 Ultimate affected versions not specified Expert PDF Reader affected versions not specified Nitro Pro affected versions not specified Nitr...

PT-2021-8836

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.5 PhantomPDF versions prior to 8.3.10 and 9.x prior to 9.5 Description The issue is related to a proxyCPDFAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read...

Foxit Reader and PhantomPDF 竞争条件问题漏洞

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker could exploit the vulnerability to cause a stack buffer overflow or out-of-bounds read...

Foxit Reader and PhantomPDF 竞争条件问题漏洞

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker could exploit the vulnerability to cause a stack buffer overflow or out-of-bounds read...

Foxit Reader和Foxit PhantomPDF 竞争条件问题漏洞

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF, which can be exploited by attackers to cause a stack buffer overflow or an out-of-bounds read...