2236 matches found
CVE-2018-5680: Out-of-bounds Read
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...
CVE-2018-7406: Improper Validation of Array Index
An issue was discovered in Foxit Reader before 9.1 and PhantomPDF before 9.1. This vulnerability allows remote attackers to execute arbitrary code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...
CVE-2018-5676: Improper Restriction of Operations within the Bounds of a Memory Buffer
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...
CVE-2018-5674: Improper Restriction of Operations within the Bounds of a Memory Buffer
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...
PT-2018-17077
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...
CVE-2018-5675: Out-of-bounds Write
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...
Foxit PhantomPDF Multiple Vulnerabilities (May 2018) - Windows
Foxit PhantomPDF is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:foxitsoftware:phantompdf";...
Foxit Reader and Foxit PhantomPDF Heap Buffer Overflow Vulnerability
Foxit Reader is a PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF is a commercial version. A heap buffer overflow vulnerability exists in the parsing of BITMAPINFOHEADER records for BMP files in Foxit Reader versions prior to 9.1 and Foxit PhantomPDF versions...
Foxit PhantomPDF < 9.1 Multiple Vulnerabilities
According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 9.1. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109398; scriptversion"1.8...
Foxit Reader and PhantomPDF Memory Misreference Vulnerability (CNVD-2018-08295)
Foxit Reader is a Chinese Foxit Foxit software company of a PDF document reader.PhantomPDF is a commercial version. A memory misreference vulnerability exists in Foxit Reader versions prior to 9.1 and PhantomPDF versions prior to 9.1. A remote attacker can exploit this vulnerability to execute...
Foxit PhantomPDF Multiple Vulnerabilities (Apr 2018) - Windows
Foxit PhantomPDF is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:foxitsoftware:phantompdf";...
Heap overflow
In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of the BITMAPINFOHEADER record in BMP files. The issue results from the lack of proper validation of the biSize member, which can result in a heap based buffer overflow. An attacker can leverage this to...
CVE-2017-17557
In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of the BITMAPINFOHEADER record in BMP files. The issue results from the lack of proper validation of the biSize member, which can result in a heap based buffer overflow. An attacker can leverage this to...
CVE-2017-17557
In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of the BITMAPINFOHEADER record in BMP files. The issue results from the lack of proper validation of the biSize member, which can result in a heap based buffer overflow. An attacker can leverage this to...
CVE-2017-17557
CVE-2017-17557: Foxit Reader < 9.1 and Foxit PhantomPDF
CVE-2017-17557
In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of the BITMAPINFOHEADER record in BMP files. The issue results from the lack of proper validation of the biSize member, which can result in a heap based buffer overflow. An attacker can leverage this to...
CVE-2017-17557: Improper Restriction of Operations within the Bounds of a Memory Buffer
In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of the BITMAPINFOHEADER record in BMP files. The issue results from the lack of proper validation of the biSize member, which can result in a heap based buffer overflow. An attacker can leverage this to...
Foxit Reader and PhantomPDF Memory Misreference Vulnerability (CNVD-2018-08293)
Foxit Reader is a Chinese Foxit Foxit software company of a PDF document reader.PhantomPDF is a commercial version. A memory misreference vulnerability exists in Foxit Reader versions prior to 9.1 and PhantomPDF versions prior to 9.1. A remote attacker can exploit this vulnerability to execute...