CVE-2020-26536: NULL Pointer Dereference

An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is a NULL pointer dereference via a crafted PDF document...

CVE-2020-26538: Uncontrolled Search Path Element

An issue was discovered in Foxit Reader and PhantomPDF before 10.1. It allows attackers to execute arbitrary code via a Trojan horse taskkill.exe in the current working directory...

Foxit PhantomPDF Information Disclosure Vulnerability (CNVD-2020-62458)

PhantomPDF is a Chinese Foxit Foxit company for enterprise-level users of PDF document processing software. An information disclosure vulnerability exists in Foxit PhantomPDF's handling of U3D objects embedded in PDF files. The vulnerability stems from improper validation of user-supplied data. A...

Foxit PhantomPDF Remote Code Execution Vulnerability (CNVD-2020-62457)

PhantomPDF is a Chinese Foxit Foxit company for enterprise-level users of PDF document processing software. A remote code execution vulnerability exists in the parsing of GIF files in Foxit PhantomPDF 10.0.1.35811 and earlier versions. The vulnerability stems from a failure to validate the...

Foxit PhantomPDF Elevation of Privilege Vulnerability

PhantomPDF is a Chinese Foxit Foxit company for enterprise-level users of PDF document processing software. An elevation of privilege vulnerability exists in Foxit PhantomPDF 10.0.1.35811 and earlier versions in the handling of configuration files used by the update service. The vulnerability ste...

Foxit Reader Remote Code Execution Vulnerability (CNVD-2020-62463)

Foxit Reader is a PDF document reader. A remote code execution vulnerability exists in the handling of annotated objects in Foxit Reader 10.0.1.35811 and earlier versions. The vulnerability stems from a failure to verify the existence of an object before performing an operation on it. An attacker...

Foxit Reader Elevation of Privilege Vulnerability

Foxit Reader is a PDF document reader. An elevation of privilege vulnerability exists in Foxit Reader 10.0.1.35811 and earlier versions in the handling of configuration files used by the update service. The vulnerability stems from incorrect privilege settings on resources used by the update...

Foxit PhantomPDF Remote Code Execution Vulnerability (CNVD-2020-62459)

PhantomPDF is a Chinese Foxit Foxit company for enterprise-level users of PDF document processing software. A remote code execution vulnerability exists in Foxit PhantomPDF's handling of U3D objects embedded in PDF files. The vulnerability stems from improper validation of user-supplied data. An...

Denial of Service Vulnerability in Foxit PDF Reader

Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. A denial of service vulnerability exists in Foxit Reader, which can be exploited by attackers to cause a denial of service...

Foxit PhantomPDF Remote Code Execution Vulnerability (CNVD-2020-62464)

PhantomPDF is a Chinese Foxit Foxit company for enterprise-level users of PDF document processing software. A remote code execution vulnerability exists in Foxit PhantomPDF's handling of U3D objects embedded in PDF files. The vulnerability stems from a failure to properly validate the length of...

Foxit Reader Remote Code Execution Vulnerability (CNVD-2020-62462)

Foxit Reader is a PDF document reader. A remote code execution vulnerability exists in the parsing of JPEG2000 images in Foxit Reader 10.0.1.35811 and earlier versions. The vulnerability stems from improper validation of user-supplied data. An attacker can exploit the vulnerability to execute cod...

PT-2020-14968

Name of the Vulnerable Software and Affected Versions Foxit Reader version 10.0.1.35811 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...

PT-2020-14964

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 10.0.0.35798 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...

PT-2020-14965

Name of the Vulnerable Software and Affected Versions Foxit Reader version 10.0.0.35798 Description This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit...

PT-2020-14962

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 10.0.0.35798 Description This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious...

Vulnerabilities fixed in Foxit Reader and Foxit PhantomPDF

Vulnerabilities have been fixed in Foxit Reader and Foxit PhantomPDF. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service DoS Remote code execution User Rights Access to system data Increased user privileges Foxit has...

Foxit PhantomPDF Update Service Incorrect Permission Assignment Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PhantomPDF. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the...

Foxit PhantomPDF GIF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of GI...

PT-2020-14961

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 10.0.0.35798 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...

PT-2020-14967

Name of the Vulnerable Software and Affected Versions Foxit Reader version 10.0.0.35798 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...