CVE-2022-37381

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-37381

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-37389

CVE-2022-37389 affects Foxit PDF Reader (11.2.2.53575). The root cause is improper handling in AcroForms due to not validating object existence before operations, enabling remote code execution when a user visits a malicious page or opens a malicious file. The vulnerability requires user interact...

CVE-2022-37386

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-37387

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-37385

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-37383

CVE-2022-37383 concerns Foxit PDF software (Reader/Editor/PhantomPDF lineage) with multiple vulnerabilities. The core issue is in the handling of Doc objects, Annotation objects, arrays, or JavaScript-driven actions, enabling read past end-of-allocated-object scenarios. Impact statements across c...

CVE-2022-37386

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-43639

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.1.12430. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-43641

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 12.0.1.12430. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-43649

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.2.12465. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-43640

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 12.0.1.12430. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-43649

CVE-2022-43649 affects Foxit PDF Reader 12.0.2.12465, where the flaw in handling Annotation objects occurs due to not validating object existence before operations, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). Refe...

Foxit PDF Reader 缓冲区错误漏洞

Foxit PDF Reader is China Foxit Foxit company a PDF reader. An information disclosure vulnerability exists in Foxit PDF Reader, which can be exploited by attackers to obtain sensitive information...

Foxit PDF Reader 资源管理错误漏洞

Foxit PDF Reader is a PDF reader from Foxit China. Foxit PDF Reader is vulnerable to resource management errors, which can be exploited to execute arbitrary code in the context of the current process...

CVE-2022-37382

CVE-2022-37382 affects Foxit PDF Reader 11.2.1.53537 (and related Foxit/Editor variants). The root cause is a missing validation of an object before performing operations in removeIcon, allowing information disclosure and, with additional vulnerabilities, potential arbitrary code execution in the...

CVE-2022-37387

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-37384

CVE-2022-37384 affects Foxit PDF Reader 11.2.1.53537. The flaw exists in the delay method due to not validating the existence of an object before operations, enabling arbitrary code execution when a user visits a malicious page or opens a malicious file (requires user interaction). Root cause per...

CVE-2022-37380

Foxit PDF Reader 11.2.1.53537 is affected by a vulnerability in the handling of ADBC objects that can be triggered by JavaScript actions, allowing read past the end of an allocated object. An attacker could leverage this with other vulnerabilities to execute arbitrary code in the context of the c...

CVE-2022-37379

CVE-2022-37379 affects Foxit PDF Reader 11.2.1.53537. The flaw is in the handling of the AFSpecial_KeystrokeEx method where the code does not validate the existence of an object before performing operations. This can disclose sensitive information and, in conjunction with other vulnerabilities, m...