Lucene search
+L

2460 matches found

CNVD
CNVD
•added 2019/10/10 12:00 a.m.•22 views

Foxit PhantomPDF Dwg2Pdf DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A security vulnerability exists in the parsing of Foxit PhantomPDF Dwg2Pdf DXF files. An attacker can exploit this vulnerability to execute code in the context of the current process...

7.8CVSS7.3AI score0.05194EPSS
SaveExploits0References1
NVD
NVD
•added 2019/10/04 6:15 p.m.•31 views

CVE-2019-6776

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.6AI score0.03935EPSS
SaveExploits0References2
OSV
OSV
•added 2019/10/04 6:15 p.m.•15 views

CVE-2019-13317

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.1AI score0.07711EPSS
SaveExploits0References2
OSV
OSV
•added 2019/10/04 6:15 p.m.•16 views

CVE-2019-13316

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.5AI score0.07711EPSS
SaveExploits0References2
NVD
NVD
•added 2019/10/04 6:15 p.m.•38 views

CVE-2019-13317

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.8AI score0.07711EPSS
SaveExploits0References2
Prion
Prion
•added 2019/10/04 6:15 p.m.•29 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.6AI score0.03935EPSS
SaveExploits0References2Affected Software2
Prion
Prion
•added 2019/10/04 6:15 p.m.•31 views

Design/Logic Flaw

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.8AI score0.07711EPSS
SaveExploits0References2Affected Software2
CVE
CVE
•added 2019/10/04 5:37 p.m.•188 views

CVE-2019-6776

Foxit PhantomPDF 9.5.0.20723 and earlier are affected by a removeField/AcroForms watermark handling flaw. The vulnerability stems from not validating the existence of an object before performing operations, enabling remote code execution when a user opens a malicious page or file. Multiple connec...

7.8CVSS7.6AI score0.03935EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2019/10/04 5:37 p.m.•43 views

CVE-2019-13317

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.8AI score0.07711EPSS
SaveExploits0References2
CVE
CVE
•added 2019/10/04 5:37 p.m.•186 views

CVE-2019-13317

The CVE-2019-13317 entry concerns Foxit PhantomPDF. Affects PhantomPDF 9.5.0.20723 and earlier, with the root cause in the Calculate actions handling: the code performs operations on an object without first validating its existence. This leads to remote code execution in the context of the curren...

7.8CVSS7.8AI score0.07711EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2019/10/04 5:35 p.m.•46 views

CVE-2019-13316

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.8AI score0.07711EPSS
SaveExploits0References2
CVE
CVE
•added 2019/10/04 5:35 p.m.•190 views

CVE-2019-13316

Foxit PhantomPDF 9.5.0.20723 is affected by CVE-2019-13316. The flaw lies in the handling of Calculate actions where the code fails to validate the existence of an object before performing operations, enabling remote code execution in the context of the current process. Exploitation requires user...

7.8CVSS7.8AI score0.07711EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2019/10/04 12:00 a.m.•3 views

PT-2019-14966

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 9.5.0.20723 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...

7.8CVSS0.05194EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2019/10/04 12:00 a.m.•2 views

PT-2019-14967

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 9.5.0.20723 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...

7.8CVSS0.05466EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2019/10/04 12:00 a.m.•3 views

PT-2019-13270

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 9.5.0.20723 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...

7.8CVSS0.06837EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2019/10/04 12:00 a.m.•3 views

PT-2019-13269

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 9.5.0.20723 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...

7.8CVSS0.06837EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
•added 2019/10/04 12:00 a.m.•42 views

Foxit PhantomPDF Dwg2Pdf DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of...

7.8CVSS4.8AI score0.05466EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2019/10/04 12:00 a.m.•42 views

Foxit PhantomPDF Dwg2Pdf DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of...

7.8CVSS4.8AI score0.06837EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2019/10/04 12:00 a.m.•49 views

Foxit PhantomPDF Dwg2Pdf DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DX...

7.8CVSS5.2AI score0.05194EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2019/10/04 12:00 a.m.•38 views

Foxit PhantomPDF Dwg2Pdf DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of...

7.8CVSS4.6AI score0.06837EPSS
SaveExploits0
Rows per page
Query Builder