CVE-2019-20837: Improper Verification of Cryptographic Signature

An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It allows signature validation bypass via a modified file or a file with non-standard signatures...

CVE-2019-20836: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has mishandling of cloud credentials, as demonstrated by Google Drive...

CVE-2019-20835: Undefined Security Weakness

An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has homograph mishandling...

CVE-2019-20834: Improper Verification of Cryptographic Signature

An issue was discovered in Foxit PhantomPDF before 8.3.10. It allows signature validation bypass via a modified file or a file with non-standard signatures...

CVE-2019-20833: Improper Authentication

An issue was discovered in Foxit PhantomPDF before 8.3.10. It has mishandling of cloud credentials, as demonstrated by Google Drive...

PT-2020-13690

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.2 PhantomPDF versions prior to 9.7.2 Description The issue is related to a use-after-free error caused by JavaScript execution after a deletion or close operation. Recommendations For Foxit Reader versions...

PT-2020-13689

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.2 PhantomPDF versions prior to 9.7.2 Description The issue is related to brute-force attack mishandling due to the CAS service lacking a limit on login failures. Recommendations For Foxit Reader versions prio...

PT-2020-10777

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.12 Description An issue was discovered that results in a NULL pointer dereference. Recommendations For versions prior to 8.3.12, update to version 8.3.12 or later to resolve the issue...

PT-2020-10787

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.11 Description A buffer overflow issue exists due to a looping correction not occurring after JavaScript updates Field APs. Recommendations For versions prior to 8.3.11, update to version 8.3.11 or later ...

PT-2020-13688

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.2 PhantomPDF versions prior to 9.7.2 Description An issue allows information disclosure of a hardcoded username and password in the DocuSign plugin. Recommendations For Foxit Reader versions prior to 9.7.2,...

PT-2020-13693

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.2 PhantomPDF versions prior to 9.7.2 Description An issue allows resource consumption via long strings in the content stream. Recommendations For Foxit Reader versions prior to 9.7.2, update to version 9.7.2 ...

PT-2020-13691

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.2 PhantomPDF versions prior to 9.7.2 Description The issue is related to circular reference mishandling, which causes a loop. Recommendations For Foxit Reader versions prior to 9.7.2, update to version 9.7.2 ...

PT-2020-13692

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7.2 Description An issue allows resource consumption via crafted cross-reference stream data. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.7.2, update to version 9.7.2 or...

PT-2020-13694

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7.2 Description The issue allows signature validation bypass via a modified file or a file with non-standard signatures. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.7.2,...

PT-2020-13698

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.1 PhantomPDF versions prior to 9.7.1 Description The issue is related to a use-after-free error that occurs when processing a document that lacks a dictionary. Recommendations For Foxit Reader versions prior ...

PT-2020-10796

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.10 Description An issue was discovered in Foxit PhantomPDF related to homograph mishandling. Recommendations For versions prior to 8.3.10, update to version 8.3.10 or later to resolve the issue...

PT-2020-10797

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.10 Description The issue concerns the mishandling of cloud credentials, specifically demonstrated with Google Drive. Recommendations For versions prior to 8.3.10, update to version 8.3.10 or later to...

PT-2020-10798

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.10 Description An issue allows signature validation bypass via a modified file or a file with non-standard signatures. Recommendations For Foxit PhantomPDF versions prior to 8.3.10, update to version 8.3....

PT-2020-10799

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.5 Foxit PhantomPDF versions prior to 9.5 Description An issue was discovered that involves homograph mishandling. Recommendations For Foxit Reader versions prior to 9.5, update to version 9.5 or later. For Foxi...

PT-2020-10800

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.5 Foxit PhantomPDF versions prior to 9.5 Description The issue concerns the mishandling of cloud credentials, specifically demonstrated with Google Drive. Recommendations For Foxit Reader versions prior to 9.5,...