CVE-2018-21235: Improper Authentication

An issue was discovered in Foxit E-mail advertising system before September 2018. It allows authentication bypass and information disclosure, related to Interspire Email Marketer...

CVE-2018-21239: Insufficiently Protected Credentials

An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows NTLM credential theft via a GoToE or GoToR action...

CVE-2018-21241: Untrusted Search Path

An issue was discovered in Foxit PhantomPDF before 8.3.6. It has an untrusted search path that allows a DLL to execute remote code...

CVE-2018-21242: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows Remote Code Execution via a GoToE or GoToR action...

CVE-2018-21243: Unrestricted Upload of File with Dangerous Type

An issue was discovered in Foxit PhantomPDF before 8.3.6. It has COM object mishandling when Microsoft Word is used...

CVE-2018-21244: Unrestricted Upload of File with Dangerous Type

An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows arbitrary application execution via an embedded executable file in a PDF portfolio, aka FG-VD-18-029...

CVE-2019-20822: Out-of-bounds Write

An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.7.0.29430. It has an out-of-bounds write via incorrect image data...

CVE-2020-13813: Untrusted Search Path

An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working directory when FoxitStudioPhoto3663.6.6.916.exe is used...

CVE-2020-13812: Untrusted Search Path

An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working directory...

CVE-2020-13811: Out-of-bounds Write

An issue was discovered in Foxit Studio Photo before 3.6.6.922. It has an out-of-bounds write via a crafted TIFF file...

CVE-2020-13803: Improper Verification of Cryptographic Signature

An issue was discovered in Foxit PhantomPDF Mac and Foxit Reader for Mac before 4.0. It allows signature validation bypass via a modified file or a file with non-standard signatures...

CVE-2019-20816: NULL Pointer Dereference

An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference during the parsing of file data...

CVE-2018-21236: NULL Pointer Dereference

An issue was discovered in Foxit Reader before 2.4.4. It has a NULL pointer dereference...

CVE-2019-20827: Out-of-bounds Write

An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It allows stack consumption because of interaction between ICC-Based color space and Alternate color space...

PT-2020-8879

Name of the Vulnerable Software and Affected Versions Foxit E-mail advertising system versions prior to September 2018 Description An issue in the Foxit E-mail advertising system allows authentication bypass and information disclosure, related to Interspire Email Marketer. Recommendations For...

PT-2020-8888

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.6 Description The issue allows arbitrary application execution via an embedded executable file in a PDF portfolio. Recommendations For Foxit PhantomPDF versions prior to 8.3.6, update to version 8.3.6 or...

PT-2020-8886

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.6 Description An issue in Foxit PhantomPDF allows Remote Code Execution via a GoToE or GoToR action. Recommendations For versions prior to 8.3.6, update to version 8.3.6 or later to resolve the issue...

PT-2020-10795

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.5.0.20733 Description An issue was discovered in the 3D Plugin Beta, causing a crash due to void data mishandling. Recommendations For versions prior to 9.5.0.20733, update to version 9.5.0.20733...

PT-2020-10786

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7.0.29430 Description An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF. It has an out-of-bounds write via incorrect image data. Recommendations For versions prior to...

PT-2020-8885

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.6 Description An issue was discovered in Foxit PhantomPDF that allows a DLL to execute remote code due to an untrusted search path. Recommendations For versions prior to 8.3.6, update to version 8.3.6 or...