Foxit PhantomPDF < 4.0 Privilege Escalation (macOS)

The version of Foxit PhantomPDF installed on the remote macOS host is prior to 4.0. It is, therefore, affected by a Signature Validation Bypass vulnerability that delivers incorrect validation results when validating certain PDF files that have been modified maliciously or contains non-standard...

PT-2020-14560

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 9.7.2.29539 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...

PT-2020-14559

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 9.7.1.29511 Description This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a malicious file. The...

Foxit PhantomPDF JSCreate Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PhantomPDF SetLocalDescription Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PhantomPDF < 10.0.1 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 10.0.1. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's...

Foxit PhantomPDF Resource Management Error Vulnerability (CNVD-2020-32462)

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit PhantomPDF versions prior to 8.3.7. An attacker could exploit this vulnerability to cause the application to crash...

Foxit PhantomPDF NTLM Credential Stealing Vulnerability

Foxit PhantomPDF is China Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit PhantomPDF versions prior to 8.3.7. The vulnerability can be exploited to obtain NTLM credentials through GoToE or GoToR operations...

Unspecified Vulnerability in Foxit Reader and Foxit PhantomPDF

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader versions prior to 9.5 and PhantomPDF versions prior to 9.5, which arises from the program not properly handling synonyms. An attacker could exploit the...

Foxit Reader and PhantomPDF Information Disclosure Vulnerability (CNVD-2020-32457)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader versions prior to 9.5 and PhantomPDF versions prior to 9.5, which stems from the program not properly handling cloud credentials. An attacker could exploit...

Foxit PhantomPDF Signature Verification Bypass Vulnerability

PhantomPDF is a Chinese Foxit Foxit company for enterprise-level users of PDF document processing software. A signature verification bypass vulnerability exists in Foxit PhantomPDF versions prior to 8.3.10. An attacker can bypass signature verification by using a modified document or a document...

Foxit PhantomPDF Cloud Credentials Mishandling Vulnerability

PhantomPDF is a Chinese Foxit Foxit company for enterprise-level users of PDF document processing software. A cloud credential mishandling vulnerability exists in Foxit PhantomPDF versions prior to 8.3.10. An attacker could exploit this vulnerability to access documents on Google Drive...

Foxit Reader and PhantomPDF Buffer Overflow Vulnerability (CNVD-2020-32453)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A buffer overflow vulnerability exists in Foxit Reader versions prior to 9.6 and PhantomPDF versions prior to 9.6. The vulnerability originates when a networked system or product performs an operation in...

Foxit Reader and PhantomPDF code issue vulnerability (CNVD-2020-32452)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A code issue vulnerability exists in Foxit Reader versions prior to 9.6 and PhantomPDF versions prior to 9.6. An attacker could exploit this vulnerability to cause the application to crash...

Foxit Reader and PhantomPDF Buffer Overflow Vulnerability (CNVD-2020-32451)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A buffer overflow vulnerability exists in Foxit Reader prior to version 9.6 and PhantomPDF prior to version 9.6. An attacker could exploit this vulnerability to cause the application to crash...

Foxit PhantomPDF Mac and Reader for Mac Buffer Overflow Vulnerability

Foxit PhantomPDF Mac and Foxit Reader for Mac are both China Foxit Foxit company's a macOS-based PDF document reader. A buffer overflow vulnerability exists in Foxit PhantomPDF Mac versions prior to 3.3 and Reader for Mac versions prior to 3.3. The vulnerability originates when a networked system...

Foxit PhantomPDF code issue vulnerability (CNVD-2020-32447)

Foxit PhantomPDF is China Foxit Foxit company a PDF document reader. A code issue vulnerability exists in Foxit PhantomPDF versions prior to 8.3.11. The vulnerability stems from a design or implementation problem in the code development process of a networked system or product. An attacker could...

Foxit PhantomPDF Buffer Overflow Vulnerability (CNVD-2020-32448)

Foxit PhantomPDF is China Foxit Foxit company a PDF document reader. A buffer overflow vulnerability exists in Foxit PhantomPDF versions prior to 8.3.11. The vulnerability stems from a networked system or product that performs operations in memory without properly validating data boundaries,...

Foxit Reader and PhantomPDF Resource Management Error Vulnerability (CNVD-2020-32444)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A buffer overflow vulnerability exists in Foxit Reader versions prior to 9.7.1 and PhantomPDF versions prior to 9.7.1. The vulnerability stems from a networked system or product that performs operations ...

Foxit Reader and PhantomPDF 3D Plugin Buffer Overflow Vulnerability

Foxit Reader and so on are all Chinese Foxit Foxit company's products.Foxit Reader is a PDF document reader.Foxit 3D Plugin is a use in the PDF document reader in the 3D plugin.Foxit PhantomPDF is a PDF document reader.Foxit PhantomPDF is a PDF document reader. A buffer overflow vulnerability...