CVE-2019-5131: Use After Free

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick t...

PT-2020-11071

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader version 9.7.0.29435 Description A use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader. This issue can be triggered by a specially crafted PDF document, allowing a previously freed object in memory ...

PT-2020-11074

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader version 9.7.0.29435 Description An exploitable use-after-free issue exists in the JavaScript engine. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code...

KLA11648 Multiple vulnerabilities in Foxit PDF Reader

A multiple use-after-free vulnerabilities in the JavaScript engine can be exploited by a specially crafted PDF document to execute arbitrary code. Original advisories Foxit Security Bulletins Exploitation Public exploits exist for this vulnerability. Related products Foxit-Reader Foxit-Phantom-PD...

CVE-2019-5130: Use After Free

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick th...

CVE-2019-5126: Use After Free

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open t...

CVE-2019-5145: Use After Free

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open t...

PT-2020-11070

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader version 9.7.0.29435 Description A use-after-free issue in the JavaScript engine of Foxit PDF Reader can be triggered by a specially crafted PDF document, potentially leading to arbitrary code execution. An attacker must trick...

PT-2020-11069

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader version 9.7.0.29435 Description A use-after-free issue in the JavaScript engine of Foxit PDF Reader can be exploited, allowing arbitrary code execution when a specially crafted PDF document is opened. This can happen when a us...

Foxit PDF Reader JavaScript field keystroke action remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user t...

Foxit PDF Reader Javascript Field Action Validate Remote Code Execution Vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to...

Foxit PDF Reader JavaScript field action OnBlur remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to...

Foxit PDF Reader Javascript createTemplate Invalid Page Code Execution Vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to...

Foxit Reader Installed (Linux)

Binary data foxitreadernixinstalled.nbin...

Foxit 3D Plugin Beta 9.7.0.29430 NULL Pointer Dereference Vulnerability

The version of the Foxit 3D plugin installed on the remote Windows host is prior to 9.7.0.29430. It is, therefore affected by a NULL pointer dereference flaw due to improper validation of image data when parsing certain files with incorrect image information. An unauthenticated, remote attacker c...

Foxit 3D Plugin (U3DBrowser) Installed (Windows)

Binary data foxitu3dbrowserpluginwininstalled.nbin...

Foxit Reader PhantomPDF Use After Free Code Execution (CVE-2019-6730)

A use after free vulnerability exists in Foxit Reader. This vulnerability is due to improper handling of freed objects in the JavaScript popUpMenu method. Successful exploitation could allow the attacker to execute arbitrary code in the context of the application...

Foxit Studio Photo < 3.6.6.913 Multiple Vulnerabilities

According to its self-reported version, the Foxit Studio Photo application installed on the remote Windows host is affected by multiple vulnerabilities: - An out-of-bounds read error exist in the TIF file handler when processing InkNames of TIFFSetField due to improper validation of user-supplied...

Foxit Studio Photo < 3.6.6.916 Out-of-Bounds Read Vulnerability

According to its self-reported version, the Foxit Studio Photo application installed on the remote Windows host is affected by an out-of-bounds read error in the preview creation of EPS files due to improper validation of user-supplied data. An unauthenticated, remote attacker can exploit this, t...

Foxit PDF pc Client Software DLL Hijacking Vulnerability

Foxit PDF provides the same PDF rendering engine as Foxit Reader and Foxit Fengyuan PDF electronic document processing suite, using the same underlying technology as Google Chrome's embedded PDF reader, which provides a fast and clear reading experience for a wide range of users. Foxit PDF pc...