2460 matches found
CVE-2018-21237: Insufficiently Protected Credentials
An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows NTLM credential theft via a GoToE or GoToR action...
PT-2020-13698
Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.1 PhantomPDF versions prior to 9.7.1 Description The issue is related to a use-after-free error that occurs when processing a document that lacks a dictionary. Recommendations For Foxit Reader versions prior ...
CVE-2020-13815: Uncontrolled Resource Consumption
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It allows stack consumption via a loop of an indirect object reference...
PT-2020-13693
Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.2 PhantomPDF versions prior to 9.7.2 Description An issue allows resource consumption via long strings in the content stream. Recommendations For Foxit Reader versions prior to 9.7.2, update to version 9.7.2 ...
PT-2020-8885
Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.6 Description An issue was discovered in Foxit PhantomPDF that allows a DLL to execute remote code due to an untrusted search path. Recommendations For versions prior to 8.3.6, update to version 8.3.6 or...
CVE-2020-13809: Uncontrolled Resource Consumption
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via long strings in the content stream...
CVE-2020-13804: Use of Hard-coded Credentials
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows information disclosure of a hardcoded username and password in the DocuSign plugin...
PT-2020-8883
Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.2 PhantomPDF versions prior to 9.2 Description An issue was discovered that allows NTLM credential theft via a GoToE or GoToR action. Recommendations For Foxit Reader versions prior to 9.2, update to version 9....
PT-2020-13694
Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7.2 Description The issue allows signature validation bypass via a modified file or a file with non-standard signatures. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.7.2,...
PT-2020-10794
Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.6 Foxit PhantomPDF versions prior to 9.6 Description An issue was discovered that results in an out-of-bounds write when Internet Explorer is used. Recommendations For Foxit Reader versions prior to 9.6, update...
PT-2020-13692
Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7.2 Description An issue allows resource consumption via crafted cross-reference stream data. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.7.2, update to version 9.7.2 or...
PT-2020-8887
Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.6 Description An issue was discovered in Foxit PhantomPDF. It has COM object mishandling when Microsoft Word is used. Recommendations For Foxit PhantomPDF versions prior to 8.3.6, update to version 8.3.6 ...
PT-2020-10788
Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.11 Description An issue was discovered in Foxit PhantomPDF. It has a NULL pointer dereference via FXSYS wcslen in an Epub file. Recommendations For versions prior to 8.3.11, update to version 8.3.11 or...
PT-2020-13691
Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.2 PhantomPDF versions prior to 9.7.2 Description The issue is related to circular reference mishandling, which causes a loop. Recommendations For Foxit Reader versions prior to 9.7.2, update to version 9.7.2 ...
CVE-2018-21244: Unrestricted Upload of File with Dangerous Type
An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows arbitrary application execution via an embedded executable file in a PDF portfolio, aka FG-VD-18-029...
CVE-2018-21243: Unrestricted Upload of File with Dangerous Type
An issue was discovered in Foxit PhantomPDF before 8.3.6. It has COM object mishandling when Microsoft Word is used...
CVE-2018-21240: Uncontrolled Resource Consumption
An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows memory consumption via an ArrayBuffer0xfffffffe call...
CVE-2019-20830: Out-of-bounds Write
An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has an out-of-bounds write when Internet Explorer is used...