Foxit PhantomPDF Out-of-Bounds Read Vulnerability (CNVD-2021-26387 )

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. Foxit PhantomPDF suffers from an out-of-bounds read vulnerability when processing U3D objects in PDF files. The vulnerability is caused due to a lack of proper validation of user-supplied data, which could result in reading...

CVE-2021-21343

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on...

Design/Logic Flaw

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who follow...

PT-2021-17370

Name of the Vulnerable Software and Affected Versions: Foxit PhantomPDF version 10.1.0.37527 Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious...

PT-2021-17367

Name of the Vulnerable Software and Affected Versions: Foxit PhantomPDF version 10.1.0.37527 Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious...

PT-2021-17366

Name of the Vulnerable Software and Affected Versions: Foxit PhantomPDF version 10.1.0.37527 Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious...

PT-2021-17368

Name of the Vulnerable Software and Affected Versions: Foxit PhantomPDF version 10.1.0.37527 Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required to exploit this, where the target must visit a malicious page or...

PT-2021-17365

Name of the Vulnerable Software and Affected Versions: Foxit PhantomPDF version 10.1.0.37527 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. Th...

PT-2021-17371

Name of the Vulnerable Software and Affected Versions: Foxit PhantomPDF version 10.1.0.37527 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. Th...

PT-2021-17372

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 10.1.0.37527 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...

PT-2021-17373

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 10.1.0.37527 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...

PT-2021-17369

Name of the Vulnerable Software and Affected Versions: Foxit PhantomPDF version 10.1.0.37527 Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious...

Foxit PhantomPDF buffer error vulnerability

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. Foxit PhantomPDF suffers from an out-of-bounds read vulnerability when processing U3D objects in PDF files. The vulnerability is caused due to a lack of proper validation of user-supplied data, which could result in reading...

Foxit PhantomPDF U3D File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U...

Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U...

Foxit PhantomPDF U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U...

Foxit PhantomPDF U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

XStream code issue vulnerabilities

XStream is a simple Java-based library , Java objects serialized to xml and vice versa i.e. : Java objects and xml documents can be easily converted to each other . A code execution vulnerability exists in XStream, which can be exploited by an attacker to manipulate the processed input stream and...

Foxit PhantomPDF resource management error vulnerability

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A memory misreference vulnerability exists in Foxit PhantomPDF when handling U3D objects in PDF files. The vulnerability stems from the program not verifying the existence of an object before performing an operation on it. An...

Foxit PhantomPDF buffer error vulnerability

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. Foxit PhantomPDF suffers from an out-of-bounds write vulnerability when processing U3D objects in PDF files. The vulnerability stems from the program not properly validating user input. An attacker could exploit this...