CVE-2019-20820: NULL Pointer Dereference

An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference during the parsing of file data...

CVE-2019-20819: Uncontrolled Recursion

An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows stack consumption via nested function calls for XML parsing...

CVE-2019-20818: Allocation of Resources Without Limits or Throttling

An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows memory consumption because data is created for each page of an application level...

CVE-2019-20813: NULL Pointer Dereference

An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference...

CVE-2019-20817: NULL Pointer Dereference

An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference...

CVE-2019-20814: Allocation of Resources Without Limits or Throttling

An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows memory consumption because data is created for each page of an application level...

PT-2020-10794

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.6 Foxit PhantomPDF versions prior to 9.6 Description An issue was discovered that results in an out-of-bounds write when Internet Explorer is used. Recommendations For Foxit Reader versions prior to 9.6, update...

CVE-2018-21237: Insufficiently Protected Credentials

An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows NTLM credential theft via a GoToE or GoToR action...

PT-2020-13697

Name of the Vulnerable Software and Affected Versions Foxit Studio Photo versions prior to 3.6.6.922 Description The issue allows local users to gain privileges via a crafted DLL in the current working directory when a specific executable is used. Recommendations For versions prior to 3.6.6.922,...

CVE-2018-21238: Uncontrolled Resource Consumption

An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows memory consumption via an ArrayBuffer0xfffffffe call...

CVE-2018-21240: Uncontrolled Resource Consumption

An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows memory consumption via an ArrayBuffer0xfffffffe call...

CVE-2020-13804: Use of Hard-coded Credentials

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows information disclosure of a hardcoded username and password in the DocuSign plugin...

PT-2020-10793

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.6 Description An issue was discovered that leads to a NULL pointer dereference via FXSYS wcslen when processing an Epub file. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.6...

CVE-2019-20815: Uncontrolled Recursion

An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows stack consumption via nested function calls for XML parsing...

PT-2020-10791

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF Mac version 3.3 Foxit Reader for Mac versions prior to 3.3 Description An issue was discovered that allows stack consumption due to interaction between ICC-Based color space and Alternate color space. Recommendations For Foxit...

SRC-2020-0017 : Foxit Reader Heap Buffer Overflow Remote Code Execution vulnerability

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

CVE-2020-10902

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-10905

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-10907

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-10909

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...