cve-2018-9951

Foxit Reader CPDFObject Use-After-Free 원격 코드 실행 취약점 취약점 해제된 메모리를 참조하면 프로그램이 충돌하거나, 예상치 못한 값을 사용하거나, 코드를 실행할 수 있습니다. 취약점 설명 이 취약점으로 인해 원격 공격자가 취약한 Foxit Reader 설치 환경에서 임의 코드를 실행할 수 있습니다. 이 취약점을 악용하려면 사용자 상호작용이 필요하며, 대상이 악성 페이지를 방문하거나 악성 파일을 열어야 합니다. 구체적인 결함은 CPDFObject 객체 처리 과정에 존재합니다. 문제는 객체에 대한...

PS-2017-13---CVE-2018-9950

Foxit Reader PDF 파싱 범위를 벗어난 읽기 정보 노출 취약점 취약점 메모리 버퍼 경계 내 작업 제한 부적절 취약점 취약점 설명 이 취약점은 원격 공격자가 Foxit Reader의 취약한 설치에서 민감한 정보를 노출할 수 있게 합니다. 이 취약점을 악용하려면 사용자 상호작용이 필요하며, 대상이 악성 페이지를 방문하거나 악성 파일을 열어야 합니다. 구체적인 결함은 PDF 문서 파싱에 존재합니다. 문제는 사용자가 제공한 데이터의 적절한 검증 부족으로 인해 할당된 객체의 끝을 넘어 읽기가 발생할 수 있습니다. 공격자는 이...

CVE-2021-27265

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-27263

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2018-14442

Foxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free that leads to Remote Code Execution, aka V-88f4smlocs...

CVE-2021-41782

Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled...

CVE-2021-41784

Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled...

CVE-2021-27264

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-27266

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-33792

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary...

CVE-2021-33793

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document conversion...

CVE-2019-20823

An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs...

CVE-2019-20816

An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference during the parsing of file data...

CVE-2019-20825

An issue was discovered in Foxit PhantomPDF before 8.3.11. It has an out-of-bounds write when Internet Explorer is used...

CVE-2019-20834

An issue was discovered in Foxit PhantomPDF before 8.3.10. It allows signature validation bypass via a modified file or a file with non-standard signatures...

CVE-2019-20830

An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has an out-of-bounds write when Internet Explorer is used...

CVE-2019-20821

An issue was discovered in Foxit PhantomPDF Mac before 3.4. It has a NULL pointer dereference...

CVE-2019-20829

An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a NULL pointer dereference via FXSYSwcslen in an Epub file...

CVE-2019-20826

An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It has a NULL pointer dereference...

CVE-2019-20817

An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference...