2460 matches found
PT-2021-22221
Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 10.1.4 Description The issue allows writing to arbitrary files due to the lack of validation of the extractPages pathname. Recommendations For Foxit Reader and PhantomPDF versions prior to 10.1.4,...
PT-2021-22222
Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 10.1.4 Description An issue allows writing to arbitrary files because a CombineFiles pathname is not validated. Recommendations For Foxit Reader and PhantomPDF versions prior to 10.1.4, update to...
PT-2021-22223
Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 10.1.4 Foxit PhantomPDF versions prior to 10.1.4 Description The issue allows SQL Injection via crafted data at the end of a string. Recommendations For Foxit Reader versions prior to 10.1.4, update to version...
PT-2021-22220
Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 10.1.4 PhantomPDF versions prior to 10.1.4 Description The issue allows DLL hijacking. Recommendations For Foxit Reader versions prior to 10.1.4, update to version 10.1.4 or later. For PhantomPDF versions prior t...
PT-2021-22217
Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 10.1.4 Description An issue was discovered that allows memory corruption during the conversion of a PDF document to a different document format. Recommendations For versions prior to 10.1.4, update...
CVE-2021-38569: Uncontrolled Recursion
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms or link objects...
CVE-2021-38568: Out-of-bounds Write
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows memory corruption during conversion of a PDF document to a different document format...
CVE-2021-38570: Improper Link Resolution Before File Access
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files during uninstallation via a symlink...
CVE-2021-38571: Uncontrolled Search Path Element
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows DLL hijacking, aka CNVD-C-2021-68000 and CNVD-C-2021-68502...
CVE-2021-38573: Undefined Security Weakness
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname is not validated...
CVE-2021-38572: Undefined Security Weakness
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because the extractPages pathname is not validated...
CVE-2021-38574: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows SQL Injection via crafted data at the end of a string...
CVE-2021-33793: Out-of-bounds Write
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document conversion...
CVE-2021-33794: Undefined Security Weakness
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA form interaction...
Foxit PDF Editor (PhantomPDF) < 11.0.1 Multiple Vulnerabilities
According to its version, the Foxit PDF Editor application formally known as PhantomPDF installed on the remote Windows host is prior to 11.0.1. It is, therefore affected by multiple vulnerabilities: - Multiple remote code execution vulnerabilities exist in Foxit PDF Editor due to a use-after-fre...
PT-2021-5391 · Foxit · Foxit Phantompdf +1
Name of the Vulnerable Software and Affected Versions: Foxit PhantomPDF and Foxit Reader affected versions not specified Description: The issue is related to an out-of-bounds read in the handling of Annotation objects, which can result from the lack of proper validation of user-supplied data. Thi...
PT-2021-5242 · Foxit · Foxit Pdf Reader +1
Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Foxit PhantomPDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the...
Unspecified Vulnerability in Foxit Reader and Foxit PhantomPDF (CNVD-2021-50161)
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and Foxit PhantomPDF, and no details of the vulnerability are available at this time...
Foxit Reader and Foxit PhantomPDF Buffer Overflow Vulnerability
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A buffer overflow vulnerability exists in Foxit Reader and Foxit PhantomPDF, no details of the vulnerability are available at this time...
