Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-27857

Foxit Studio Photo 3.6.6.922 is affected by CVE-2020-27857 due to an out-of-bounds write during NEF file parsing, allowing remote code execution when a user opens a malicious file or visits a crafted page. Root cause: improper validation of user-supplied data leading to a write past the end of an...

CVE-2020-27857

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-27855

Foxit Studio Photo 3.6.6.922 is affected by CVE-2020-27855 due to an SR2 file parsing flaw. The root cause is improper validation of user-supplied data, causing a read past the end of an allocated structure. This information-disclosure/possible code-execution vector requires user interaction (tar...

CVE-2020-27856

Foxit Studio Photo CR2 file parsing flaw in Foxit Studio Photo 3.6.6.922 (and earlier per CNVD/ZDI) due to improper validation of user-supplied data, causing an out-of-bounds read that discloses memory. User interaction is required (targets must open a malicious page/file). The issue can be lever...

CVE-2020-27856

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-27855

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-17436

Foxit Studio Photo 3.6.6.922 is affected by a CMP file parsing vulnerability causing an out-of-bounds read in the target process. The issue arises from insufficient validation of user-supplied data and can be leveraged with other vulnerabilities to execute code in the context of the current proce...

CVE-2020-17436

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-17435

CVE-2020-17435 affects Foxit Studio Photo (versions around 3.6.6.x). The vulnerability is a CR2 file parsing flaw that allows an information disclosure due to an out-of-bounds read caused by inadequate validation of user-supplied data. Exploitation requires user interaction (visiting a malicious ...

CVE-2020-17434

CVE-2020-17434 concerns Foxit Studio Photo versions affected by an ARW file parsing flaw. The issue arises from insufficient validation of user-supplied data, causing a read past the end of an allocated structure and leading to information disclosure. Several connected sources (including ZDI advi...

CVE-2020-17435

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-17434

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-17433

Foxit Studio Photo vulnerable in CMP file parsing leading to an out-of-bounds read in Foxit Studio Photo 3.6.6.922 (and affected earlier versions per CNVD). The flaw arises from insufficient validation of user-supplied data, allowing an attacker to read past the end of an allocated structure and ...

CVE-2020-17433

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-17432

Foxit Studio Photo vulnerability CVE-2020-17432 affects parsing of CR2 files and causes an out-of-bounds read due to inadequate input validation. This can lead to information disclosure and, when combined with other flaws, potential code execution in the target process. Exploitation requires user...

CVE-2020-17431

The CVE-2020-17431 entry describes a remote code execution in Foxit Studio Photo (confirmed affected: Foxit Studio Photo 3.6.6.922 and earlier per CNVD/NVD entries; ZDI cites a CR2 file parsing flaw). The root cause is improper validation during CR2 file parsing, causing a write past the end of a...

CVE-2020-17431

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...