Lucene search
+L

3568 matches found

Zero Day Initiative
Zero Day Initiative
•added 2022/02/10 12:00 a.m.•34 views

Foxit PDF Reader Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of D...

7.8CVSS2.3AI score0.02543EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/10 12:00 a.m.•25 views

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.3AI score0.02543EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/10 12:00 a.m.•28 views

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.3AI score0.02543EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/10 12:00 a.m.•32 views

Foxit PDF Reader OnMouseExit Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the OnMouseExit...

7.8CVSS2.9AI score0.02341EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/10 12:00 a.m.•35 views

Foxit PDF Reader XFA Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.2AI score0.01889EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/02/10 12:00 a.m.•4 views

PT-2022-17011

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader versions prior to 11.2.1 Foxit PDF Editor versions prior to 11.2.1 Description The issue is related to a Stack-Based Buffer Overflow in the XFA component, specifically triggered by the 'subform colSpan="-2"' and 'draw...

9.8CVSS0.11926EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/02/10 12:00 a.m.•20 views

Foxit PDF Reader 缓冲区错误漏洞

Foxit PDF Reader, a PDF reader from Foxit China, is vulnerable to a buffer overflow vulnerability stemming from a lack of proper validation of user-supplied data, which could result in reading beyond the end of the allocated object. An attacker could exploit this vulnerability to execute code in...

8.8CVSS6.2AI score0.02341EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2022/02/10 12:00 a.m.•18 views

Foxit PDF Reader 资源管理错误漏洞

Foxit PDF Reader is a PDF reader from Foxit China.A security vulnerability exists in Foxit PDF Reader, which stems from the lack of verification of the existence of an object before performing operations on it, and can be exploited by attackers to execute arbitrary code in the context of the...

6.5CVSS6.1AI score0.02095EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
•added 2022/02/10 12:00 a.m.•32 views

Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of D...

7.8CVSS2.2AI score0.02543EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/02/10 12:00 a.m.•97 views

Foxit PDF Reader Buffer Overflow Vulnerability (CNVD-2022-13354)

Foxit PDF Reader is a PDF reader. Foxit PDF Reader handles a buffer overflow vulnerability in some Javascript methods, which can be exploited by a remote attacker to submit a special file request and trick the user into parsing it, which can crash the application or execute arbitrary code in the...

8.8CVSS9.5AI score0.01795EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/10 12:00 a.m.•41 views

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.3AI score0.02543EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/02/10 12:00 a.m.•21 views

Foxit PDF Reader 资源管理错误漏洞

Foxit PDF Reader is a PDF reader from Foxit, a Chinese company. Foxit PDF Reader is vulnerable due to a lack of verification of the existence of an object before performing operations on it, which can be exploited to execute code in the context of the current process...

8.8CVSS5.9AI score0.02543EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2022/02/10 12:00 a.m.•16 views

Foxit PDF Reader 缓冲区错误漏洞

Foxit PDF Reader is a PDF reader from Foxit China. Foxit PDF Reader has a security vulnerability that can be exploited by attackers to execute code in the context of the current process...

8.8CVSS5.9AI score0.02543EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2022/02/10 12:00 a.m.•19 views

Foxit PDF Reader 缓冲区错误漏洞

Foxit PDF Reader is a PDF reader from Foxit China. Foxit PDF Reader has a security vulnerability that can be exploited by attackers to execute code in the context of the current process...

8.8CVSS5.9AI score0.02543EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
•added 2022/02/10 12:00 a.m.•41 views

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.3AI score0.02543EPSS
SaveExploits0References1
NVD
NVD
•added 2022/02/04 11:15 p.m.•28 views

CVE-2022-22150

A memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially-crafted PDF document can trigger an exception which is improperly handled, leaving the engine in an invalid state, which can lead to memory corruption and arbitrary...

8.8CVSS0.01795EPSS
SaveExploits1References1
OSV
OSV
•added 2022/02/04 11:15 p.m.•8 views

CVE-2021-40420

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An attacker needs to trick the user to open the...

8.8CVSS5.8AI score0.04687EPSS
SaveExploits1References1
NVD
NVD
•added 2022/02/04 11:15 p.m.•27 views

CVE-2021-40420

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An attacker needs to trick the user to open the...

8.8CVSS0.04687EPSS
SaveExploits1References1
Prion
Prion
•added 2022/02/04 11:15 p.m.•24 views

Memory corruption

A memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially-crafted PDF document can trigger an exception which is improperly handled, leaving the engine in an invalid state, which can lead to memory corruption and arbitrary...

6.8CVSS8.9AI score0.01795EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2022/02/04 11:15 p.m.•36 views

Design/Logic Flaw

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An attacker needs to trick the user to open the...

6.8CVSS8.8AI score0.04687EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder