12611 matches found
PT-2020-13687
Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF Mac versions prior to 4.0 Foxit Reader for Mac versions prior to 4.0 Description The issue allows signature validation bypass via a modified file or a file with non-standard signatures. Recommendations For Foxit PhantomPDF Mac...
PT-2020-8887
Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.6 Description An issue was discovered in Foxit PhantomPDF. It has COM object mishandling when Microsoft Word is used. Recommendations For Foxit PhantomPDF versions prior to 8.3.6, update to version 8.3.6 ...
PT-2020-8880
Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 2.4.4 Description An issue was discovered in Foxit Reader, which has a NULL pointer dereference. Recommendations For versions prior to 2.4.4, update to version 2.4.4 or later to resolve the issue...
PT-2020-8881
Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.7 Description The issue allows NTLM credential theft via a GoToE or GoToR action. Recommendations For Foxit PhantomPDF versions prior to 8.3.7, update to version 8.3.7 or later to resolve the issue...
PT-2020-8883
Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.2 PhantomPDF versions prior to 9.2 Description An issue was discovered that allows NTLM credential theft via a GoToE or GoToR action. Recommendations For Foxit Reader versions prior to 9.2, update to version 9....
CVE-2020-13815: Uncontrolled Resource Consumption
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It allows stack consumption via a loop of an indirect object reference...
CVE-2020-13814: Use After Free
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It has a use-after-free via a document that lacks a dictionary...
CVE-2020-13810: Improper Verification of Cryptographic Signature
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows signature validation bypass via a modified file or a file with non-standard signatures...
CVE-2020-13805: Improper Restriction of Excessive Authentication Attempts
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack mishandling because the CAS service lacks a limit on login failures...
CVE-2020-13806: Use After Free
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has a use-after-free because of JavaScript execution after a deletion or close operation...
CVE-2020-13808: Loop with Unreachable Exit Condition
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via crafted cross-reference stream data...
CVE-2020-13809: Uncontrolled Resource Consumption
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via long strings in the content stream...
CVE-2019-20830: Out-of-bounds Write
An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has an out-of-bounds write when Internet Explorer is used...
CVE-2019-20829: NULL Pointer Dereference
An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a NULL pointer dereference via FXSYSwcslen in an Epub file...
CVE-2019-20828: Buffer Copy without Checking Size of Input
An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs...
CVE-2019-20826: NULL Pointer Dereference
An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It has a NULL pointer dereference...
CVE-2019-20824: NULL Pointer Dereference
An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a NULL pointer dereference via FXSYSwcslen in an Epub file...
CVE-2019-20823: Buffer Copy without Checking Size of Input
An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs...