Lucene search
K

3046 matches found

CNVD
CNVD
added 2024/09/29 12:0 a.m.7 views

Foxit PDF Reader Code Execution Vulnerability (CNVD-2024-40813)

Foxit PDF Reader is a PDF document reader and printer with fast startup speed and rich features. A code execution vulnerability exists in Foxit PDF Reader, which can be exploited by an attacker to execute arbitrary code on the system...

7.8CVSS7.7AI score0.01759EPSS
Exploits0References1
CNVD
CNVD
added 2024/09/29 12:0 a.m.5 views

Foxit PDF Reader Code Execution Vulnerability (CNVD-2024-40811)

Foxit PDF Reader is a PDF document reader and printer with fast startup speed and rich features. A code execution vulnerability exists in Foxit PDF Reader, which can be exploited by an attacker to execute arbitrary code on the system...

7.8CVSS7.7AI score0.01126EPSS
Exploits0References1
CNVD
CNVD
added 2024/09/29 12:0 a.m.6 views

Foxit PDF Reader Buffer Overflow Vulnerability (CNVD-2025-00957)

Foxit PDF Reader is China Foxit Foxit company a PDF reader. Foxit PDF Reader suffers from a buffer overflow vulnerability that originates from an out-of-bounds write in the PDF file parsing function, which can be exploited by a remote attacker to cause remote code execution...

7.8CVSS8AI score0.01282EPSS
Exploits0References1
NVD
NVD
added 2024/09/26 4:15 p.m.13 views

CVE-2024-41605

In Foxit PDF Reader before 2024.3, and PDF Editor before 2024.3 and 13.x before 13.1.4, an attacker can replace an update file with a Trojan horse via side loading, because the update service lacks integrity validation for the updater. Attacker-controlled code may thus be executed...

8.4CVSS0.00049EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/26 12:0 a.m.10 views

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6.7AI score0.01759EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/26 12:0 a.m.6 views

Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6AI score0.00549EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/26 12:0 a.m.6 views

Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.00349EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/26 12:0 a.m.9 views

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6.7AI score0.01609EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/09/26 12:0 a.m.23 views

Foxit PDF Reader for Mac < 2024.3 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader for Mac application previously named Foxit Reader for Mac installed on the remote macOS host is prior to 2024.3. It is, therefore affected by multiple vulnerabilities: - Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. Th...

8.8CVSS7.9AI score0.04084EPSS
Exploits1References5
Zero Day Initiative
Zero Day Initiative
added 2024/09/26 12:0 a.m.7 views

Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6AI score0.00549EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/09/26 12:0 a.m.10 views

CVE-2024-41605

In Foxit PDF Reader before 2024.3, and PDF Editor before 2024.3 and 13.x before 13.1.4, an attacker can replace an update file with a Trojan horse via side loading, because the update service lacks integrity validation for the updater. Attacker-controlled code may thus be executed...

8.4AI score0.00049EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/09/26 12:0 a.m.2 views

PT-2024-6538 · Foxit · Foxit Pdf Reader +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader versions prior to 2024.3 Foxit PDF Editor versions prior to 2024.3 and 13.x prior to 13.1.4 Description: The issue is related to errors in access control, allowing an attacker to replace an update file with a Trojan horse via...

8.4CVSS7.8AI score0.00049EPSS
Exploits0References8
Zero Day Initiative
Zero Day Initiative
added 2024/09/26 12:0 a.m.3 views

Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6.7AI score0.00497EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/26 12:0 a.m.5 views

Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.00349EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/09/26 12:0 a.m.15 views

CVE-2024-41605

In Foxit PDF Reader before 2024.3, and PDF Editor before 2024.3 and 13.x before 13.1.4, an attacker can replace an update file with a Trojan horse via side loading, because the update service lacks integrity validation for the updater. Attacker-controlled code may thus be executed...

0.00049EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/26 12:0 a.m.6 views

Foxit PDF Reader Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6.8AI score0.01126EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/26 12:0 a.m.7 views

Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.00349EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/26 12:0 a.m.6 views

Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PD...

7.8CVSS6.7AI score0.01112EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/26 12:0 a.m.5 views

Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the...

7.8CVSS6.6AI score0.00049EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/26 12:0 a.m.3 views

Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the...

7.8CVSS6.6AI score0.00046EPSS
Exploits0References1
Rows per page
Query Builder