PT-2019-13535 · Foxit · Foxit Phantompdf

Name of the Vulnerable Software and Affected Versions: Foxit PhantomPDF versions prior to 8.3.11 Description: The issue arises from the lack of proper validation of the existence of an object prior to performing operations on that object when executing JavaScript, which could cause the applicatio...

CVE-2019-14209: Out-of-bounds Write

An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to Heap Corruption due to data desynchrony when adding AcroForm...

PT-2019-13531

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.11 Description An issue was discovered where the application could crash due to an endless loop. This loop results from confusing relationships between a child and parent object, caused by an append error...

PT-2019-13533

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.10 Description An issue was discovered that could expose the application to Heap Corruption due to data desynchrony when adding AcroForm. Recommendations For versions prior to 8.3.10, update to version...

PT-2019-13536

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.11 Description An issue was discovered in the application where it could crash when calling certain XFA JavaScript due to the use of, or access to, a NULL pointer without proper validation on the object...

PT-2019-13539

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.11 Description An issue was discovered in the application where it could crash when calling xfa.event.rest XFA JavaScript due to accessing a wild pointer. Recommendations For versions prior to 8.3.11,...

PT-2019-13538

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.10 Description An issue was discovered where the application could be exposed to a JavaScript Denial of Service when deleting pages in a document that contains only one page by calling a t.hidden = true...

CVE-2019-14211: Improper Input Validation

An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash due to the lack of proper validation of the existence of an object prior to performing operations on that object when executing JavaScript...

CVE-2019-14212: NULL Pointer Dereference

An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling certain XFA JavaScript due to the use of, or access to, a NULL pointer without proper validation on the object...

CVE-2019-14210: Out-of-bounds Write

An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to Memory Corruption due to the use of an invalid pointer copy, resulting from a destructed string object...

CVE-2019-14207: Loop with Unreachable Exit Condition

An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling the clone function due to an endless loop resulting from confusing relationships between a child and parent object caused by an append error...

CVE-2019-14214: Undefined Security Weakness

An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to a JavaScript Denial of Service when deleting pages in a document that contains only one page by calling a "t.hidden = true" function...

CVE-2019-14215: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling xfa.event.rest XFA JavaScript due to accessing a wild pointer...

CVE-2019-14213: Undefined Security Weakness

An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash due to the repeated release of the signature dictionary during CSGSignatureF and CPDFDocument destruction...

CVE-2019-14208: NULL Pointer Dereference

An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to a NULL pointer dereference and crash when getting a PDF object from a document, or parsing a certain portfolio that contains a null dictionary...

PT-2019-13532

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.10 Description An issue in the application can cause a NULL pointer dereference and crash when getting a PDF object from a document or parsing a certain portfolio that contains a null dictionary...

PT-2019-13534

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.10 Description The issue is related to memory corruption caused by the use of an invalid pointer copy. This occurs as a result of a destructed string object. Recommendations For versions prior to 8.3.10,...

Foxit PhantomPDF CVE-2019-17139 Out of Bounds Write Remote Code Execution Vulnerability

Description Foxit PhantomPDF is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code within the context of the affected application or gain sensitive information. Failed exploit attempts will likely cause a denial-of-service condition...

Foxit PhantomPDF < 9.6 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 9.6. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's...

Foxit Reader and Foxit PhantomPDF Information Disclosure Vulnerability (CNVD-2019-21939)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. An information disclosure vulnerability exists in Foxit Reader 9.5.0.20723 and earlier versions and Foxit PhantomPDF 9.5.0.20723 and earlier versions for Windows platforms. The vulnerability stems from a...