PT-2020-10801

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.5 Description An issue allows signature validation bypass via a modified file or a file with non-standard signatures. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.5, update...

PT-2020-13699

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.1 PhantomPDF versions prior to 9.7.1 Description The issue allows stack consumption via a loop of an indirect object reference. Recommendations For Foxit Reader versions prior to 9.7.1, update to version 9.7....

PT-2020-10779

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.12 Description An issue in the XML parsing functionality allows stack consumption via nested function calls. Recommendations For versions prior to 8.3.12, update to version 8.3.12 or later to resolve the...

PT-2020-10784

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7 PhantomPDF versions prior to 9.7 Description The issue is related to a NULL pointer dereference that occurs during the parsing of file data. This indicates a problem with how the software handles certain file...

PT-2020-10785

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF Mac versions prior to 3.4 Description An issue was discovered that results in a NULL pointer dereference. Recommendations For versions prior to 3.4, update to version 3.4 or later to resolve the issue...

PT-2020-10783

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7 Description An issue was discovered that allows stack consumption via nested function calls for XML parsing. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.7, update to...

PT-2020-10778

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.12 Description An issue in Foxit PhantomPDF allows memory consumption due to data creation for each page at the application level. Recommendations For versions prior to 8.3.12, update to version 8.3.12 or...

PT-2020-10788

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.11 Description An issue was discovered in Foxit PhantomPDF. It has a NULL pointer dereference via FXSYS wcslen in an Epub file. Recommendations For versions prior to 8.3.11, update to version 8.3.11 or...

PT-2020-10780

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.12 Description An issue was discovered that causes a NULL pointer dereference during the parsing of file data. Recommendations For versions prior to 8.3.12, update to version 8.3.12 or later to resolve th...

PT-2020-10782

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7 Description An issue allows memory consumption because data is created for each page at the application level. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.7, update to...

PT-2020-10781

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7 Description An issue was discovered that results in a NULL pointer dereference. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.7, update to version 9.7 or later to resolve...

PT-2020-10790

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF Mac version 3.3 Foxit Reader for Mac versions prior to 3.3 Description An issue was discovered that results in a NULL pointer dereference. Recommendations For Foxit PhantomPDF Mac version 3.3, update to a version that contains...

PT-2020-10791

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF Mac version 3.3 Foxit Reader for Mac versions prior to 3.3 Description An issue was discovered that allows stack consumption due to interaction between ICC-Based color space and Alternate color space. Recommendations For Foxit...

PT-2020-10792

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.6 Description A buffer overflow issue was discovered due to a looping correction not occurring after JavaScript updates Field APs. Recommendations For Foxit Reader and PhantomPDF versions prior t...

PT-2020-13695

Name of the Vulnerable Software and Affected Versions Foxit Studio Photo versions prior to 3.6.6.922 Description An issue was discovered that allows for an out-of-bounds write via a crafted TIFF file. Recommendations For versions prior to 3.6.6.922, update to version 3.6.6.922 or later to resolve...

PT-2020-8884

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.2 PhantomPDF versions prior to 9.2 Description An issue was discovered that allows memory consumption via an ArrayBuffer0xfffffffe call. Recommendations For Foxit Reader versions prior to 9.2, update to version...

PT-2020-13696

Name of the Vulnerable Software and Affected Versions Foxit Studio Photo versions prior to 3.6.6.922 Description The issue allows local users to gain privileges via a crafted DLL in the current working directory. Recommendations For versions prior to 3.6.6.922, update to version 3.6.6.922 or late...

PT-2020-8882

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.7 Description An issue in Foxit PhantomPDF allows memory consumption via an ArrayBuffer0xfffffffe call. Recommendations For Foxit PhantomPDF versions prior to 8.3.7, update to version 8.3.7 or later to...

CVE-2019-20825: Out-of-bounds Write

An issue was discovered in Foxit PhantomPDF before 8.3.11. It has an out-of-bounds write when Internet Explorer is used...

CVE-2019-20831: Undefined Security Weakness

An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.5.0.20733. It has void data mishandling, causing a crash...