Lucene search
K

17 matches found

Vulnrichment
Vulnrichment
added 2025/08/13 1:37 p.m.1 views

CVE-2025-32451

A memory corruption vulnerability exists in Foxit Reader 2025.1.0.27937 due to the use of an uninitialized pointer. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An...

8.8CVSS7.8AI score0.0019EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/08/13 1:37 p.m.6 views

CVE-2025-32451

A memory corruption vulnerability exists in Foxit Reader 2025.1.0.27937 due to the use of an uninitialized pointer. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An...

8.8CVSS0.0019EPSS
Exploits1References1
CVE
CVE
added 2025/08/13 1:37 p.m.19 views

CVE-2025-32451

Foxit Reader 2025.1.0.27937 is affected by CVE-2025-32451, a memory corruption vulnerability caused by an uninitialized pointer. Exploitation requires a user to open a specially crafted malicious PDF containing Javascript, or to visit a crafted malicious site if the browser plugin is enabled, pot...

8.8CVSS7.8AI score0.0019EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2024/10/02 9:15 p.m.1 views

CVE-2024-28888

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a checkbox field object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker...

8.8CVSS5.8AI score
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 3:46 a.m.1 views

SUSE CVE-2021-22116

RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugi...

5.9CVSS7.5AI score0.01026EPSS
Exploits0References8
OSV
OSV
added 2022/11/21 4:15 p.m.1 views

CVE-2022-40129

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing Optional Content Group API, which can lead to arbitrary code execution. An attacker...

7.8CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2022/11/21 4:15 p.m.2 views

CVE-2022-37332

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing media player API, which can lead to arbitrary code execution. An attacker needs to...

7.8CVSS5.8AI score0.15489EPSS
Exploits1References1
OSV
OSV
added 2021/06/08 12:15 p.m.0 views

UBUNTU-CVE-2021-22116

RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugi...

7.5CVSS6.2AI score0.01026EPSS
Exploits0References5
OSV
OSV
added 2020/12/22 6:15 p.m.1 views

CVE-2020-13560

A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the...

8.8CVSS7.4AI score0.198EPSS
Exploits1References1
OSV
OSV
added 2018/10/08 4:29 p.m.1 views

CVE-2018-3997

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick th...

8.8CVSS5.8AI score
Exploits0References3
OSV
OSV
added 2018/10/08 4:29 p.m.2 views

CVE-2018-16295

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16292, CVE-2018-16293, CVE-2018-16294, CVE-2018-16296, and CVE-2018-16297. A specially crafted PDF document can...

7.8CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2018/10/08 4:29 p.m.1 views

CVE-2018-16297

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16292, CVE-2018-16293, CVE-2018-16294, CVE-2018-16295, and CVE-2018-16296. A specially crafted PDF document can...

7.8CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2018/10/03 3:29 p.m.2 views

CVE-2018-3965

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the...

7.8CVSS5.8AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2018/10/03 12:0 a.m.1 views

PT-2018-16348 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader version 9.1.0.5096 Description: An exploitable use-after-free issue exists in the JavaScript engine of Foxit Software's Foxit PDF Reader. A specially crafted PDF document can trigger a previously freed object in memory to be...

8CVSS7.8AI score0.50108EPSS
Exploits1References4
OSV
OSV
added 2018/10/02 9:29 p.m.2 views

CVE-2018-3959

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Author property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this...

7.8CVSS5.6AI score
Exploits0References2
OSV
OSV
added 2018/10/02 9:29 p.m.2 views

CVE-2018-3960

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Producer property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this...

7.8CVSS5.6AI score
Exploits0References2
OSV
OSV
added 2018/08/01 8:29 p.m.2 views

CVE-2018-3939

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user...

8.8CVSS5.8AI score0.39294EPSS
Exploits1References2
Rows per page
Query Builder