Lucene search
K

3046 matches found

CNNVD
CNNVD
added 2023/07/26 12:0 a.m.5 views

Sumatra PDF 安全漏洞

Sumatra PDF is a software application. PDF, ePub, MOBI, CHM, XPS, DjVu, CBZ, CBR readers for Windows. A security vulnerability exists in Sumatra PDF Reader version v3.4.6, which originated from a vulnerability that allows an attacker to cause a denial of service DoS via a crafted text file...

5.5CVSS5.7AI score0.0029EPSS
Exploits1References2
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.26 views

Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

3.3CVSS5.9AI score0.00389EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/07/26 12:0 a.m.3 views

PT-2023-4412 · Foxit · Foxit Pdf Editor +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Foxit PDF Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the...

7.8CVSS7.8AI score0.00438EPSS
Exploits0References7
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.26 views

Foxit PDF Reader AcroForm signature Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6.7AI score0.00413EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/07/26 12:0 a.m.3 views

PT-2023-4357 · Foxit · Foxit Pdf Reader +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Foxit PDF Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the...

7.8CVSS8.1AI score0.00413EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2023/07/25 12:0 a.m.45 views

Foxit PDF Reader for Mac < 12.1.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader for Mac application previously named Foxit Reader for Mac installed on the remote macOS host is prior to 12.1.1. It is, therefore affected by multiple vulnerabilities: - A use-after-free vulnerability exists in the JavaScript engine of Foxit Software...

8.8CVSS6.7AI score0.00898EPSS
Exploits1References9
OSV
OSV
added 2023/07/19 2:15 p.m.2 views

CVE-2023-28744

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.1.1.15289. A specially crafted PDF document can trigger the reuse of previously freed memory by manipulating form fields of a specific type. This can lead to memory corruption and arbitrary...

8.8CVSS7.2AI score0.00898EPSS
Exploits1References2
OSV
OSV
added 2023/07/19 2:15 p.m.1 views

CVE-2023-27379

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By prematurely deleting objects associated with pages, a specially crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution...

8.8CVSS7.2AI score0.01026EPSS
Exploits1References2
OSV
OSV
added 2023/07/19 2:15 p.m.1 views

CVE-2023-33866

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By prematurely deleting objects associated with pages, a specially crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution...

8.8CVSS7.2AI score0.00898EPSS
Exploits1References2
NVD
NVD
added 2023/07/19 2:15 p.m.10 views

CVE-2023-27379

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By prematurely deleting objects associated with pages, a specially crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution...

8.8CVSS8.8AI score0.01026EPSS
Exploits1References2
NVD
NVD
added 2023/07/19 2:15 p.m.19 views

CVE-2023-28744

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.1.1.15289. A specially crafted PDF document can trigger the reuse of previously freed memory by manipulating form fields of a specific type. This can lead to memory corruption and arbitrary...

8.8CVSS8.9AI score0.00898EPSS
Exploits1References2
NVD
NVD
added 2023/07/19 2:15 p.m.18 views

CVE-2023-33866

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By prematurely deleting objects associated with pages, a specially crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution...

8.8CVSS8.8AI score0.00898EPSS
Exploits1References2
Prion
Prion
added 2023/07/19 2:15 p.m.28 views

Design/Logic Flaw

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By prematurely deleting objects associated with pages, a specially crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution...

6.8CVSS8.8AI score0.00898EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2023/07/19 2:15 p.m.23 views

Design/Logic Flaw

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By prematurely deleting objects associated with pages, a specially crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution...

6.8CVSS8.8AI score0.01026EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2023/07/19 2:15 p.m.22 views

Design/Logic Flaw

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.1.1.15289. A specially crafted PDF document can trigger the reuse of previously freed memory by manipulating form fields of a specific type. This can lead to memory corruption and arbitrary...

6.8CVSS8.9AI score0.00898EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2023/07/19 1:16 p.m.78 views

CVE-2023-28744

Foxit CVE-2023-28744 is a use-after-free in the JavaScript engine of Foxit PDF Reader/Editor. A specially crafted PDF can trigger reuse of freed memory in forms, leading to memory corruption and arbitrary code execution. Exploitation requires user action (opening a malicious PDF) or, if the brows...

8.8CVSS8.8AI score0.00898EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2023/07/19 1:16 p.m.25 views

CVE-2023-28744

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.1.1.15289. A specially crafted PDF document can trigger the reuse of previously freed memory by manipulating form fields of a specific type. This can lead to memory corruption and arbitrary...

8.8CVSS9.1AI score0.00898EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2023/07/19 1:16 p.m.12 views

CVE-2023-28744

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.1.1.15289. A specially crafted PDF document can trigger the reuse of previously freed memory by manipulating form fields of a specific type. This can lead to memory corruption and arbitrary...

8.8CVSS7.4AI score0.00898EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2023/07/19 1:16 p.m.21 views

CVE-2023-27379

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By prematurely deleting objects associated with pages, a specially crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution...

8.8CVSS7.3AI score0.01026EPSS
Exploits1References1
Cvelist
Cvelist
added 2023/07/19 1:16 p.m.17 views

CVE-2023-27379

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By prematurely deleting objects associated with pages, a specially crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution...

8.8CVSS9AI score0.01026EPSS
Exploits1References1
Rows per page
Query Builder