PT-2020-10801

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.5 Description An issue allows signature validation bypass via a modified file or a file with non-standard signatures. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.5, update...

PT-2020-10800

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.5 Foxit PhantomPDF versions prior to 9.5 Description The issue concerns the mishandling of cloud credentials, specifically demonstrated with Google Drive. Recommendations For Foxit Reader versions prior to 9.5,...

PT-2020-10789

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.11 Description An issue was discovered that results in an out-of-bounds write when Internet Explorer is used. Recommendations For versions prior to 8.3.11, update to version 8.3.11 or later to resolve the...

CVE-2020-13805: Improper Restriction of Excessive Authentication Attempts

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack mishandling because the CAS service lacks a limit on login failures...

CVE-2019-20825: Out-of-bounds Write

An issue was discovered in Foxit PhantomPDF before 8.3.11. It has an out-of-bounds write when Internet Explorer is used...

PT-2020-10787

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.11 Description A buffer overflow issue exists due to a looping correction not occurring after JavaScript updates Field APs. Recommendations For versions prior to 8.3.11, update to version 8.3.11 or later ...

PT-2020-10797

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.10 Description The issue concerns the mishandling of cloud credentials, specifically demonstrated with Google Drive. Recommendations For versions prior to 8.3.10, update to version 8.3.10 or later to...

PT-2020-10791

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF Mac version 3.3 Foxit Reader for Mac versions prior to 3.3 Description An issue was discovered that allows stack consumption due to interaction between ICC-Based color space and Alternate color space. Recommendations For Foxit...

PT-2020-10782

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7 Description An issue allows memory consumption because data is created for each page at the application level. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.7, update to...

PT-2020-13690

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.2 PhantomPDF versions prior to 9.7.2 Description The issue is related to a use-after-free error caused by JavaScript execution after a deletion or close operation. Recommendations For Foxit Reader versions...

PT-2020-8881

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.7 Description The issue allows NTLM credential theft via a GoToE or GoToR action. Recommendations For Foxit PhantomPDF versions prior to 8.3.7, update to version 8.3.7 or later to resolve the issue...

PT-2020-10786

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7.0.29430 Description An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF. It has an out-of-bounds write via incorrect image data. Recommendations For versions prior to...

PT-2020-10784

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7 PhantomPDF versions prior to 9.7 Description The issue is related to a NULL pointer dereference that occurs during the parsing of file data. This indicates a problem with how the software handles certain file...

PT-2020-8888

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.6 Description The issue allows arbitrary application execution via an embedded executable file in a PDF portfolio. Recommendations For Foxit PhantomPDF versions prior to 8.3.6, update to version 8.3.6 or...

PT-2020-8886

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.6 Description An issue in Foxit PhantomPDF allows Remote Code Execution via a GoToE or GoToR action. Recommendations For versions prior to 8.3.6, update to version 8.3.6 or later to resolve the issue...

PT-2020-8884

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.2 PhantomPDF versions prior to 9.2 Description An issue was discovered that allows memory consumption via an ArrayBuffer0xfffffffe call. Recommendations For Foxit Reader versions prior to 9.2, update to version...

PT-2020-10781

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7 Description An issue was discovered that results in a NULL pointer dereference. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.7, update to version 9.7 or later to resolve...

PT-2020-10777

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.12 Description An issue was discovered that results in a NULL pointer dereference. Recommendations For versions prior to 8.3.12, update to version 8.3.12 or later to resolve the issue...

PT-2020-10783

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7 Description An issue was discovered that allows stack consumption via nested function calls for XML parsing. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.7, update to...

PT-2020-10779

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.12 Description An issue in the XML parsing functionality allows stack consumption via nested function calls. Recommendations For versions prior to 8.3.12, update to version 8.3.12 or later to resolve the...