Lucene search
K

3046 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/11/23 12:0 a.m.26 views

Foxit PDF Reader U3D File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3...

7.8CVSS4.3AI score0.01091EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/11/23 12:0 a.m.2 views

PT-2022-6455 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this issue, where the target mus...

7.8CVSS8AI score0.03925EPSS
Exploits0References7
OSV
OSV
added 2022/11/21 4:15 p.m.3 views

CVE-2022-40129

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing Optional Content Group API, which can lead to arbitrary code execution. An attacker...

7.8CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2022/11/21 4:15 p.m.16 views

CVE-2022-40129

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing Optional Content Group API, which can lead to arbitrary code execution. An attacker...

8.8CVSS0.0098EPSS
Exploits1References1
OSV
OSV
added 2022/11/21 4:15 p.m.2 views

CVE-2022-32774

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By prematurely deleting objects associated with pages, a specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution...

7.8CVSS5.8AI score0.0098EPSS
Exploits1References1
NVD
NVD
added 2022/11/21 4:15 p.m.19 views

CVE-2022-32774

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By prematurely deleting objects associated with pages, a specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution...

8.8CVSS0.0098EPSS
Exploits1References1
NVD
NVD
added 2022/11/21 4:15 p.m.14 views

CVE-2022-38097

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By prematurely destroying annotation objects, a specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An...

8.8CVSS0.00801EPSS
Exploits0References1
NVD
NVD
added 2022/11/21 4:15 p.m.16 views

CVE-2022-37332

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing media player API, which can lead to arbitrary code execution. An attacker needs to...

8.8CVSS0.0135EPSS
Exploits1References1
OSV
OSV
added 2022/11/21 4:15 p.m.4 views

CVE-2022-37332

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing media player API, which can lead to arbitrary code execution. An attacker needs to...

7.8CVSS5.8AI score0.0135EPSS
Exploits1References1
Prion
Prion
added 2022/11/21 4:15 p.m.14 views

Design/Logic Flaw

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By prematurely destroying annotation objects, a specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An...

4.4CVSS7.8AI score0.00801EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2022/11/21 4:15 p.m.21 views

Design/Logic Flaw

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing Optional Content Group API, which can lead to arbitrary code execution. An attacker...

4.4CVSS7.8AI score0.0098EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2022/11/21 4:15 p.m.19 views

Design/Logic Flaw

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By prematurely deleting objects associated with pages, a specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution...

4.4CVSS7.9AI score0.0098EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2022/11/21 4:15 p.m.17 views

Design/Logic Flaw

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing media player API, which can lead to arbitrary code execution. An attacker needs to...

4.4CVSS7.7AI score0.0135EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/11/21 4:5 p.m.31 views

CVE-2022-40129

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing Optional Content Group API, which can lead to arbitrary code execution. An attacker...

8.8CVSS7.9AI score0.0098EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2022/11/21 4:5 p.m.7 views

CVE-2022-40129

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing Optional Content Group API, which can lead to arbitrary code execution. An attacker...

8.8CVSS7.8AI score0.0098EPSS
Exploits1References1
CVE
CVE
added 2022/11/21 4:5 p.m.94 views

CVE-2022-40129

Affected product: Foxit PDF Reader (v12.0.1.12430). Vulnerability: Use-after-free in the JavaScript engine triggered by crafted PDFs, specifically via Optional Content Group API, leading to arbitrary code execution. Exploitation may require user action or could occur if a malicious site is visite...

8.8CVSS7.6AI score0.0098EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/21 4:5 p.m.6 views

CVE-2022-38097

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By prematurely destroying annotation objects, a specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An...

8.8CVSS7.8AI score0.00801EPSS
Exploits0References1
CVE
CVE
added 2022/11/21 4:5 p.m.78 views

CVE-2022-38097

The CVE-2022-38097 entry concerns Foxit Software’s PDF Reader (version 12.0.1.12430). The root cause is a use-after-free in the JavaScript engine triggered by prematurely destroying annotation objects, leading to potential arbitrary code execution when a user opens a malicious PDF or visits a cra...

8.8CVSS7.6AI score0.00801EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/11/21 4:5 p.m.23 views

CVE-2022-38097

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By prematurely destroying annotation objects, a specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An...

8.8CVSS7.9AI score0.00801EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/11/21 4:5 p.m.32 views

CVE-2022-37332

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing media player API, which can lead to arbitrary code execution. An attacker needs to...

8.8CVSS7.9AI score0.0135EPSS
Exploits1References1
Rows per page
Query Builder