Foxit PhantomPDF < 7.3.4 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 7.3.4. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists that is triggered when handling FlateDecode streams. An...

Foxit PhantomPDF ListBox Value Memory Error References Remote Code Execution Vulnerability

PhantomPDF is the universal PDF editor. Foxit PhantomPDF has a security vulnerability in the handling of the ListBox value attribute, which can cause the pointer that has been released in the hanging pointer to be reused, and an attacker can execute arbitrary code in the context of the current...

Foxit PhantomPDF Signature Field Memory Error References Remote Code Execution Vulnerability

PhantomPDF is the universal PDF editor. PhantomPDF has a security vulnerability in the handling of the Signature field, which could allow the reuse of a pointer that has already been released in the hanging pointer. An attacker can execute arbitrary code in the context of the current process...

Foxit Reader and Foxit PhantomPDF Denial of Service Vulnerability (CNVD-2016-01903)

Foxit Reader is a PDF document reader.Foxit PhantomPDF is a commercial version. A denial of service vulnerability can be triggered when using Foxit Reader or Foxit PhantomPDF to open a carefully constructed PDF file. An attacker can exploit this vulnerability to cause a denial of service...

Foxit Reader and Foxit PhantomPDF Remote Code Execution Vulnerability

Foxit Reader is a PDF document reader.Foxit PhantomPDF is a commercial version. When using Foxit Reader or Foxit PhantomPDF to open a carefully constructed PDF file, there is a security vulnerability that can be exploited by an attacker to remotely execute arbitrary code...

Foxit PhantomPDF Signature field Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Foxit PhantomPDF ListBox value Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

PT-2016-5833

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 7.3.4 PhantomPDF versions prior to 7.3.4 Description The issue is related to a use-after-free vulnerability in the XFA forms handling functionality. This allows remote attackers to execute arbitrary code via a...

PT-2016-5832

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 7.3.4 PhantomPDF versions prior to 7.3.4 Description The issue is related to a use-after-free vulnerability that allows remote attackers to execute arbitrary code. This is achieved via an object with a revision...

PT-2016-5828

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 7.3.4 PhantomPDF versions prior to 7.3.4 Description The issue is related to a use-after-free vulnerability that can be exploited by remote attackers to execute arbitrary code. This is achieved through a crafted...

PT-2016-5834

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 7.3.4 Description The issue allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted image, including JPEG, GIF, or BMP formats. This occurs when...

Foxit PhantomPDF WillClose Memory Error References Remote Code Execution Vulnerability

Foxit Reader is a PDF document reader.Foxit PhantomPDF is a commercial version. A security vulnerability exists in the handling of the WillClose operation of Foxit Reader, which forces the hanging pointer to be released and then reused when performing a WillClose operation on a constructed PDF. A...

Foxit Reader and Foxit PhantomPDF integer overflow vulnerability (CNVD-2016-00916)

Foxit Reader is a PDF document reader.Foxit PhantomPDF is a commercial version. Foxit Reader and Foxit PhantomPDF have an integer overflow vulnerability that can be exploited by attackers to execute arbitrary code or cause a denial of service...

Foxit Reader and Foxit PhantomPDF Arbitrary Code Execution Vulnerability (CNVD-2016-00994)

Foxit Reader is a PDF document reader.Foxit PhantomPDF is a commercial version. Foxit Reader and Foxit PhantomPDF contain a security vulnerability that can be exploited by remote attackers to construct malicious files that can be parsed by the user, crashing the application or executing arbitrary...

Foxit Reader and Foxit PhantomPDF Arbitrary Code Execution Vulnerability

Foxit Reader is a PDF document reader.Foxit PhantomPDF is a commercial version. Foxit Reader and Foxit PhantomPDF contain a security vulnerability that can be exploited by remote attackers to construct malicious files that can be parsed by the user, crashing the application or executing arbitrary...

Foxit Reader and Foxit PhantomPDF Integer Overflow Vulnerability

Foxit Reader is a PDF document reader.Foxit PhantomPDF is a commercial version. Foxit Reader and Foxit PhantomPDF have an integer overflow vulnerability that can be exploited by remote attackers to construct malicious files that can be parsed by the user, crashing the application or executing...

Foxit PhantomPDF WillClose after the release of the heavy interest with a remote code execution vulnerability-vulnerability warning-the black bar safety net

Affected systems: Foxit Foxit Reader Description: Foxit Reader is a small PDF document viewer and print program. Foxit Reader WillClose the operation processing in the presence of security vulnerabilities. The structure of the PDF execution WillClose operation, will force the suspension of the...

Foxit PhantomPDF WillClose Action Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Foxit PhantomPDF Arbitrary Code Execution Vulnerability

Foxit PhantomPDF is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Foxit Reader/PhantomPDF Memory Misreference Vulnerability

Foxit PhantomPDF is a practical PDF solution. A memory misreference vulnerability exists in Print object and App object handling in Foxit Reader before 7.2.2 and Foxit PhantomPDF before 7.2.2. A remote attacker can execute arbitrary code using a constructed PDF document...