CVE-2021-31435

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-31434

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-31434

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-31433

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-31436

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-31433

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Stack overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-31435

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-31438

CVE-2021-31438 affects Foxit Studio Photo 3.6.6.931. The vulnerability resides in PSP file handling where the length of user-supplied data is not properly validated before being copied into a fixed-length stack buffer, resulting in a stack-based buffer overflow. This can allow remote attackers to...

CVE-2021-31437

Foxit Studio Photo 3.6.6.931 contains an out-of-bounds write in JP2 file parsing due to insufficient input validation, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The issue is documented by ZDI (ZDI-21-480). No re...

CVE-2021-31436

CVE-2021-31436 affects Foxit Studio Photo 3.6.6.931. The issue resides in the SGI file handling where the length of user-supplied data is not properly validated before copying to a heap-based buffer, causing a heap-based buffer overflow. This leads to remote code execution in the context of the c...

CVE-2021-31435

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-31435

Foxit Studio Photo 3.6.6.931 is affected by a CMP file parsing vulnerability caused by uninitialized memory access, enabling remote code execution. Exploitation requires user interaction (e.g., visiting a malicious page or opening a malicious file). The issue is documented across multiple sources...

CVE-2021-31434

Foxit Studio Photo 3.6.6.931 is affected by CVE-2021-31434. The issue is an out-of-bounds write in the JPM file parsing path caused by insufficient validation of user-supplied data, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visit...

CVE-2021-31434

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-31433

Foxit Studio Photo 3.6.6.931 is affected by CVE-2021-31433. The root cause is improper validation during ARW file parsing, causing a write past the end of an allocated data structure. This enables remote code execution in the context of the current process, with user interaction required (target ...

CVE-2021-31433

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit Studio Photo Code Execution Vulnerability (CNVD-2021-31754)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A security vulnerability exists in Foxit Studio Photo, which can be exploited by remote attackers to execute arbitrary code on an affected Foxit Studio Photo installation...

Foxit Studio Photo Out-of-Bounds Write Vulnerability (CNVD-2021-34118)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. An out-of-bounds write vulnerability exists in Foxit Studio Photo version 3.6.6.931 when parsing JP2 files. The vulnerability stems from the program not properly validating user input. An attacker could...