12611 matches found
CVE-2020-26537
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. In a certain Shading calculation, the number of outputs is unequal to the number of color components in a color space. This causes an out-of-bounds write...
CVE-2020-26537
CVE-2020-26537 affects Foxit Reader and PhantomPDF prior to version 10.1. The issue occurs in a shading calculation where the number of outputs does not match the color components in a color space, causing an out-of-bounds write. The connected sources confirm the affected product and the underlyi...
CVE-2020-26538
CVE-2020-26538 affects Foxit Reader and PhantomPDF prior to 10.1. The issue allows arbitrary code execution via a Trojan horse taskkill.exe placed in the current working directory, indicating a local-execution path likely dependent on the processing of external/ tampered files. The vulnerability ...
CVE-2020-26538
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. It allows attackers to execute arbitrary code via a Trojan horse taskkill.exe in the current working directory...
CVE-2020-26539
Foxit Reader and PhantomPDF (before v10.1) contain a use-after-free condition triggered by a multiple interpretation error for /V in the Additional Action and Field dictionaries, enabling remote code execution or an information leak. The issue is documented in CVE-2020-26539 with CVSS scores indi...
CVE-2020-26539
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. When there is a multiple interpretation error for /V in the Additional Action and Field dictionaries, a use-after-free can occur with resultant remote code execution or an information leak...
CVE-2020-26540
Foxit Reader and Foxit PhantomPDF for macOS are affected by a code injection/information disclosure vulnerability in versions prior to 4.1. The root cause is that the Hardened Runtime protection is not applied to code signing, which can allow an attacker to inject code or leak information due to ...
CVE-2020-26540
An issue was discovered in Foxit Reader and PhantomPDF before 4.1 on macOS. Because the Hardened Runtime protection mechanism is not applied to code signing, code injection or an information leak can occur...
PT-2020-16442
Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 10.1 PhantomPDF versions prior to 10.1 Description An issue was discovered related to an Opt object use-after-free, which occurs during AcroForm JavaScript execution. This is specifically related to the...
PT-2020-16447
Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 10.1 Foxit PhantomPDF versions prior to 10.1 Description An issue was discovered that can lead to a use-after-free error, potentially resulting in remote code execution or an information leak. This occurs when...
PT-2020-16445
Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 10.1 Foxit PhantomPDF versions prior to 10.1 Description An issue was discovered in a certain Shading calculation where the number of outputs is unequal to the number of color components in a color space, causing...
PT-2020-16446
Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 10.1 PhantomPDF versions prior to 10.1 Description An issue allows attackers to execute arbitrary code via a Trojan horse taskkill.exe in the current working directory. Recommendations For Foxit Reader versions...
PT-2020-16443
Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 10.1 PhantomPDF versions prior to 10.1 Description An issue was discovered that leads to a write access violation and a read access violation when TslAlloc attempts to allocate thread local storage but obtains an...
PT-2020-16448
Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 4.1 Description An issue was discovered where the Hardened Runtime protection mechanism is not applied to code signing, allowing code injection or an information leak to occur. Recommendations For...
PT-2020-16444
Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 10.1 Foxit PhantomPDF versions prior to 10.1 Description An issue was discovered that allows for a NULL pointer dereference via a crafted PDF document. Recommendations For Foxit Reader versions prior to 10.1,...
CVE-2020-26535: Out-of-bounds Write
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. If TslAlloc attempts to allocate thread local storage but obtains an unacceptable index value, V8 throws an exception that leads to a write access violation and read access violation...
CVE-2020-26537: Out-of-bounds Write
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. In a certain Shading calculation, the number of outputs is unequal to the number of color components in a color space. This causes an out-of-bounds write...
CVE-2020-26539: Use After Free
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. When there is a multiple interpretation error for /V in the Additional Action and Field dictionaries, a use-after-free can occur with resultant remote code execution or an information leak...
CVE-2020-26534: Use After Free
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is an Opt object use-after-free related to Field::ClearItems and Field::DeleteOptions, during AcroForm JavaScript execution...