CVE-2020-12248

In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can execute arbitrary code via a heap-based buffer overflow because dirty image-resource data is mishandled...

CVE-2020-12248

CVE-2020-12248 affects Foxit Reader and Foxit PhantomPDF: heap-based buffer overflow caused by mishandling dirty image-resource data, allowing arbitrary code execution. Affected: Foxit Reader and PhantomPDF versions before 10.0.1, and PhantomPDF before 9.7.3. Impact per sources: potential remote ...

CVE-2020-12247

CVE-2020-12247 affects Foxit Reader and Foxit PhantomPDF prior to versions 10.0.1 and 9.7.3, respectively. The root cause is an out-of-bounds read caused by a text-string index being reused after splitting a string, which can also trigger a crash. Exploitation could lead to disclosure of sensitiv...

CVE-2020-11493

CVE-2020-11493 affects Foxit Reader and PhantomPDF prior to 10.0.1 and 9.7.3 respectively. The issue stems from a direct transformation from a PDF Object to a Stream without adequately handling a crafted XObject, allowing an uninitialized object to leak sensitive information. The result is an inf...

PT-2020-12645

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 10.0.1 PhantomPDF versions prior to 9.7.3 and versions prior to 10.0.1 Description The issue allows attackers to obtain sensitive information about an uninitialized object. This is due to the direct transformatio...

PT-2020-13071

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 10.0.1 PhantomPDF versions prior to 9.7.3 and versions prior to 10.0.1 Description The issue allows attackers to obtain sensitive information from an out-of-bounds read because a text-string index continues to be...

PT-2020-13072

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 10.0.1 PhantomPDF versions prior to 9.7.3 and versions prior to 10.0.1 Description The issue allows attackers to execute arbitrary code via a heap-based buffer overflow because dirty image-resource data is...

CVE-2020-12247: Out-of-bounds Read

In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information from an out-of-bounds read because a text-string index continues to be used after splitting a string into two parts. A crash may also occur...

CVE-2020-12248: Out-of-bounds Write

In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can execute arbitrary code via a heap-based buffer overflow because dirty image-resource data is mishandled...

CVE-2020-11493: Insufficient Verification of Data Authenticity

In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information about an uninitialized object because of direct transformation from PDF Object to Stream without concern for a crafted XObject...

Foxit Studio Photo PSD Out-of-Bounds Write Vulnerability

Foxit Studio Photo is a professional image editing software. Foxit Studio Photo parses PSD files with an out-of-bounds write vulnerability that can be exploited by a remote attacker to submit a special file request, which induces the user to parse it, and can be used to execute arbitrary code in...

Foxit Studio Photo Arbitrary Code Execution Vulnerability

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A security vulnerability exists in Foxit Studio Photo 3.6.6.922, which can be exploited by attackers to remotely execute code...

Foxit Studio Photo < 3.6.6.928 Out-of-Bounds Write

According to its self-reported version, the Foxit Studio Photo application installed on the remote Windows host is prior to 3.6.6.928. It is, therefore, affected by an out-of-bounds write error when processing PSD files. A remote, unauthenticated attacker could trick a victim into opening a...

CVE-2020-17404

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17404

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17403

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17403

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17404

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17404

Foxit Studio Photo 3.6.6.922 is affected by a PSD-file handling flaw that enables an out-of-bounds write, leading to remote code execution in the context of the process. Root cause: insufficient validation of data during PSD processing, which can write past the end of an allocated structure. Expl...

CVE-2020-17403

Summary: CVE-2020-17403 affects Foxit Studio Photo (notably versions prior to 3.6.6.928, with references to 3.6.6.922 in some records). The issue is a PSD file handling vulnerability caused by insufficient validation, resulting in an out-of-bounds write that can execute code in the process contex...