Lucene search
+L

12611 matches found

Positive Technologies
Positive Technologies
•added 2020/12/09 12:00 a.m.•1 views

PT-2020-5276

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader version 10.1.0.37527 Foxit PhantomPDF affected versions not specified Description A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader. A specially crafted PDF document can trigge...

9.3CVSS0.02982EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2020/12/09 12:00 a.m.•1 views

PT-2020-5277

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader version 10.1.0.37527 Description A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader. A specially crafted PDF document can trigger reuse of previously free memory, which can lead...

9.3CVSS0.70295EPSS
SaveExploits1References8
Zero Day Initiative
Zero Day Initiative
•added 2020/12/09 12:00 a.m.•43 views

Foxit Reader XFA Template Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of XFA...

7.8CVSS2.4AI score0.03554EPSS
SaveExploits0References1
Kaspersky
Kaspersky
•added 2020/12/09 12:00 a.m.•169 views

KLA12028 Multiple vulnerabilities in Foxit Reader and Foxit PhantomPDF

Multiple vulnerabilities were found in Foxit Reader and Foxit PhantomPDF. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in PDF file can be exploited remotely to...

8.8CVSS8.9AI score0.70295EPSS
SaveExploits5References2
CNNVD
CNNVD
•added 2020/12/09 12:00 a.m.•22 views

Foxit Reader 资源管理错误漏洞

Foxit Reader is a PDF document reader. A memory misreference vulnerability exists in Foxit Reader, which allows remote attackers to submit a special file request that can be exploited to trick the user into parsing it, which can crash the application or execute arbitrary code in the application...

8.8CVSS7.7AI score0.70295EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/12/09 12:00 a.m.•1 views

PT-2020-5273

Name of the Vulnerable Software and Affected Versions Foxit Software’s PDF Reader version 10.1.0.37527 Foxit PhantomPDF affected versions not specified Description A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader. A specially crafted PDF document can...

9.3CVSS0.02328EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2020/12/09 12:00 a.m.•23 views

Foxit Reader 资源管理错误漏洞

Foxit Reader is a PDF document reader. A memory misreference vulnerability exists in Foxit Reader, which allows remote attackers to submit a special file request that can be exploited to trick the user into parsing it, which can crash the application or execute arbitrary code in the application...

8.8CVSS7.7AI score0.03045EPSS
SaveExploits1References2
Talos
Talos
•added 2020/12/09 12:00 a.m.•62 views

Foxit Reader Javascript Field fileSelect Use After Free Vulnerability

Summary A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open t...

8.8CVSS8.7AI score0.65804EPSS
SaveExploits1
Talos
Talos
•added 2020/12/09 12:00 a.m.•110 views

Foxit Reader JavaScript choice field use-after-free vulnerability

Summary A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open t...

8.8CVSS9.2AI score0.70295EPSS
SaveExploits1
Talos
Talos
•added 2020/12/09 12:00 a.m.•131 views

Foxit Reader JavaScript media openPlayer type confusion vulnerability

Summary A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger an improper use of an object, resulting in memory corruption and arbitrary code execution. An attacker needs to trick the...

8.8CVSS9AI score0.02982EPSS
SaveExploits1
Talos
Talos
•added 2020/12/09 12:00 a.m.•100 views

Foxit Reader JavaScript remove template use-after-free vulnerability

Summary A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger the reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the...

8.8CVSS8.6AI score0.02328EPSS
SaveExploits1
Talos
Talos
•added 2020/12/09 12:00 a.m.•48 views

Foxit Reader JavaScript choice field format event use-after-free vulnerability

Summary A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open t...

8.8CVSS9.2AI score0.03045EPSS
SaveExploits1
CNVD
CNVD
•added 2020/11/30 12:00 a.m.•4 views

Denial of Service Vulnerability in Foxit Reader (CNVD-2020-70504)

Foxit Reader Foxit Reader is a small PDF document reader. Foxit Reader has a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

6.8AI score
SaveExploits0
zdt
zdt
•added 2020/11/27 12:00 a.m.•102 views

Foxit Reader 9.0.1.1049 - Arbitrary Code Execution Exploit

Exploit Title: Foxit Reader 9.0.1.1049 - Arbitrary Code Execution Exploit Author: CrossWire Vendor Homepage: https://www.foxitsoftware.com/ Software Link: https://www.foxitsoftware.com/downloads/latest.php?product=Foxit-Reader&platform=Windows&version=9.0.1.1049&packagetype=exe&language=English...

8.8CVSS0.4AI score0.62295EPSS
SaveExploits15
Exploit DB
Exploit DB
•added 2020/11/27 12:00 a.m.•1140 views

Foxit Reader 9.0.1.1049 - Arbitrary Code Execution

Exploit Title: Foxit Reader 9.0.1.1049 - Arbitrary Code Execution Date: 2020-08-29 Exploit Author: CrossWire Vendor Homepage: https://www.foxitsoftware.com/ Software Link:...

8.8CVSS7.8AI score0.62295EPSS
SaveExploits15
Packet Storm
Packet Storm
•added 2020/11/26 12:00 a.m.•415 views

Foxit Reader 9.0.1.1049 Arbitrary Code Execution

Exploit Title: Foxit Reader 9.0.1.1049 - Arbitrary Code Execution Date: August 29, 2020 Exploit Author: CrossWire Vendor Homepage: https://www.foxitsoftware.com/ Software Link:...

6.8CVSS0.9AI score0.62295EPSS
SaveExploits15
Check Point Advisories
Check Point Advisories
•added 2020/11/04 12:00 a.m.•21 views

Foxit Studio Photo Remote Code Execution (CVE-2020-8880)

A remote code execution vulnerability exists in Foxit Studio Photo. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.8CVSS5.4AI score0.11057EPSS
SaveExploits0
CNVD
CNVD
•added 2020/11/04 12:00 a.m.•10 views

Foxit Reader Command Injection Vulnerability

Foxit is a professional electronic document technology solutions provider. Foxit Reader, one of Foxit's outstanding products, is currently one of the most popular PDF readers worldwide. A command injection vulnerability exists in the app.opencPDFWebPage JavsScript API product in Foxit Reader, whi...

7.8CVSS7.6AI score0.31291EPSS
SaveExploits3References1
NCSC
NCSC
•added 2020/11/03 12:00 a.m.•19 views

Vulnerability fixed in Foxit Reader

A vulnerability has been fixed in Foxit Reader. Due to the vulnerability makes it possible for a malicious person to execute arbitrary code under the user's privileges. To do this, however, the user must be tricked into opening a rogue file or to perform a specific action within the application...

7.8CVSS7.2AI score0.31291EPSS
SaveExploits3
OSV
OSV
•added 2020/11/02 9:15 p.m.•17 views

CVE-2020-14425

Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API. An attacker can execute local files and bypass the security dialog...

7.8CVSS7.2AI score0.31291EPSS
SaveExploits3References3
Rows per page
Query Builder