Lucene search
K

3046 matches found

Vulnrichment
Vulnrichment
added 2023/08/11 12:0 a.m.11 views

CVE-2020-35990

Buffer Overflow vulnerability in cFilenameInit parameter in browseForDoc function in Foxit Software Foxit PDF Reader version 10.1.0.37527, allows local attackers to cause a denial of service DoS via crafted .pdf file...

6.6AI score0.00225EPSS
Exploits0References2
CVE
CVE
added 2023/08/11 12:0 a.m.44 views

CVE-2020-35990

Foxit PDF Reader (version 10.1.0.37527) contains a buffer overflow in the cFilenameInit parameter of the browseForDoc function that can be exploited locally by processing a crafted PDF to trigger a DoS. Root cause is a boundary/overflow in untrusted input handling. The CVE-2020-35990 entry shows ...

5.5CVSS5.3AI score0.00225EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/08/11 12:0 a.m.23 views

CVE-2020-35990

Buffer Overflow vulnerability in cFilenameInit parameter in browseForDoc function in Foxit Software Foxit PDF Reader version 10.1.0.37527, allows local attackers to cause a denial of service DoS via crafted .pdf file...

5.4AI score0.00225EPSS
Exploits0References2
Talos Blog
Talos Blog
added 2023/08/09 4:0 p.m.47 views

Out-of-bounds write vulnerabilities in popular chemistry software; Foxit PDF Reader issues could lead to remote code execution

Cisco Talos recently worked with two vendors to patch multiple vulnerabilities in a favored software library used in chemistry laboratories and the Foxit PDF Reader, one of the most popular PDF reader alternatives to Adobe Acrobat. Attackers could exploit these vulnerabilities to carry out a...

6.8CVSS8.1AI score0.01026EPSS
Exploits19
BDU FSTEC
BDU FSTEC
added 2023/07/28 12:0 a.m.5 views

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) allows a perpetrator to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

10CVSS7.7AI score0.00931EPSS
Exploits1References5Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.21 views

Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of D...

7.8CVSS6.8AI score0.00438EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.25 views

Foxit PDF Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.004EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.22 views

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6.8AI score0.0045EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.28 views

Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.00389EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.28 views

Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of D...

7.8CVSS6.8AI score0.0045EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.20 views

Foxit PDF Reader XFA Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6.8AI score0.0045EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.26 views

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6.8AI score0.0045EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.23 views

Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6AI score0.00424EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.20 views

Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

3.3CVSS5.9AI score0.00386EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/07/26 12:0 a.m.1 views

PT-2023-26306 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a malicio...

3.3CVSS6.1AI score0.00389EPSS
Exploits0References5
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.20 views

Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

3.3CVSS5.9AI score0.00386EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.23 views

Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of D...

7.8CVSS6.8AI score0.00413EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/07/26 12:0 a.m.2 views

PT-2023-26309 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. It requires user interaction, such as visiting a malicious page ...

3.3CVSS5.7AI score0.004EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2023/07/26 12:0 a.m.3 views

PT-2023-26304 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a malicio...

3.3CVSS6.1AI score0.00386EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2023/07/26 12:0 a.m.2 views

PT-2023-4410 · Foxit · Foxit Pdf Reader +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Foxit PDF Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the...

7.8CVSS8.1AI score0.0045EPSS
Exploits0References7
Rows per page
Query Builder