Vulnerabilities fixed in Foxit PDF Reader and Foxit PDF Editor

Vulnerabilities have been fixed in the PDF Reader and PDF Editor from Foxit. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User rights Access to system data This...

Foxit PDF Reader for Mac < 11.1.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader for Mac application previously named Foxit Reader for Mac installed on the remote macOS host is prior to 11.1.1. It is, therefore affected by multiple vulnerabilities: - An out-of-bounds read error exists in Foxit PDF Reader for Mac due to the...

CVE-2021-45980

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via getURL in the JavaScript API...

CVE-2021-45979

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via app.launchURL in the JavaScript API...

CVE-2021-45979

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via app.launchURL in the JavaScript API...

CVE-2021-45978

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via xfa.host.gotoURL in the XFA API...

Code injection

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via app.launchURL in the JavaScript API...

CVE-2021-45980

Foxit PDF Reader and PDF Editor for macOS are affected by CVE-2021-45980 (pre-11.1). The vulnerability allows remote code execution through the getURL function in the JavaScript API. Exploitation details are not expanded beyond the remote code execution vector in the sources, so practical exploit...

CVE-2021-45979

CVE-2021-45979 affects Foxit PDF Reader and PDF Editor on macOS prior to 11.1. The issue allows an attacker to execute arbitrary code via the JavaScript API function app.launchURL, enabling remote code execution if a user opens a malicious document or triggers the affected API. The connected sour...

CVE-2021-45978

Foxit PDF Reader and PDF Editor for macOS is affected in versions before 11.1. The root cause is misuse of the XFA API via xfa.host.gotoURL in the XFA implementation, enabling arbitrary code execution. CVSS details in sources indicate high impact (C/H/I/H; LOCAL exploit with UI requirement per CV...

Foxit PDF Reader 操作系统命令注入漏洞

Foxit PDF Reader is a PDF reader from China's Foxit Foxit Corporation. Foxit PDF Reader and PDF Editor have an operating system command injection vulnerability that originated in Foxit PDF Reader and PDF Editor before 11.1 on macOS that allows remote attackers to exploit the vulnerability to...

Foxit PDF Reader 操作系统命令注入漏洞

Foxit PDF Reader is a PDF reader from the Chinese company Foxit. An operating system command injection vulnerability exists in Foxit PDF Reader and PDF Editor, which originates from Foxit PDF Reader and PDF Editor before 11.1 on macOS that allows remote attackers to exploit the vulnerability to...

Foxit PDF Reader 注入漏洞

Foxit PDF Reader is a PDF reader from the Chinese company Foxit. An injection vulnerability exists in Foxit PDF Reader and PDF Editor on macOS that allows remote attackers to execute arbitrary code via a getURL in the JavaScript API...

The vulnerability of the Foxit PDF Reader and Foxit PDF Editor programs arises from a buffer out-of-bounds exception, allowing an attacker to execute arbitrary code.

The vulnerability of Foxit PDF Reader and Foxit PDF Editor lies in the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by having the user open a specially crafted PDF file...

Mozilla Firefox Security Advisory (MFSA2015-78) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

NewStart CGSL MAIN 6.02 : firefox Multiple Vulnerabilities (NS-SA-2021-0120)

The remote NewStart CGSL host, running version MAIN 6.02, has firefox packages installed that are affected by multiple vulnerabilities: - Uninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to obtain potentially sensitive information from process memory via a...

Foxit PDF Reader Buffer Overflow Vulnerability (CNVD-2025-00964)

Foxit PDF Reader is China Foxit Foxit company a PDF reader. A buffer overflow vulnerability exists in Foxit PDF Reader due to a failure to validate the existence of an Annotation object prior to manipulating it. This vulnerability can be exploited to cause malicious code to be executed after the...

Foxit PDF Reader Information Disclosure Vulnerability

Foxit PDF Reader is a PDF reader from Foxit, a Chinese company. Foxit PDF Reader is vulnerable to information disclosure, which can be exploited by remote attackers to obtain sensitive information...

Foxit PDF Reader Remote Code Execution Vulnerability (CNVD-2021-100584)

Foxit PDF Reader is a PDF reader from Foxit China.A security vulnerability exists in Foxit PDF Reader caused by a lack of proper validation of user-supplied data, which could result in reading beyond the end of the assigned object. An attacker could exploit this vulnerability to execute arbitrary...

Foxit PDF Reader Remote Code Execution Vulnerability (CNVD-2021-100585)

A security vulnerability exists in Foxit PDF Reader, a PDF reader from Foxit China, caused by the failure to verify the existence of an object before performing operations on it. An attacker can exploit this vulnerability to execute arbitrary code on an affected Foxit PDF Reader installation...