Lucene search
+L

697 matches found

Prion
Prion
added 2022/02/18 8:15 p.m.24 views

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader Foxit reader 11.0.1.0719 macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specif...

4.3CVSS6.1AI score0.01889EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2022/02/18 7:52 p.m.158 views

CVE-2022-24370

CVE-2022-24370 affects Foxit PDF Reader for macOS (e.g., Foxit Reader 11.0.1.0719 and older). The root cause is improper validation of user-supplied data in XFA forms, leading to an out-of-bounds read (read past the end of an allocated object). This can disclose sensitive information and, in comb...

6.5CVSS6.7AI score0.01889EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2022/02/18 7:52 p.m.40 views

CVE-2022-24370

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader Foxit reader 11.0.1.0719 macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specif...

3.3CVSS7.4AI score0.01889EPSS
SaveExploits0References2
CNVD
CNVD
added 2022/02/15 12:00 a.m.26 views

Foxit PDF Reader and Foxit PDF Editor Stack Buffer Overflow Vulnerability

Foxit PDF Reader and Foxit PDF Editor are both products of Foxit China, a PDF reader and a PDF editor. A security vulnerability exists in Foxit PDF Reader and Foxit PDF Editor due to a failure to effectively restrict memory boundaries when handling XFA. An attacker could exploit this vulnerabilit...

9.8CVSS2.6AI score0.11926EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/02/11 2:15 a.m.10 views

CVE-2022-24954

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpan="-2"' and 'draw colSpan="1"' substrings...

9.8CVSS5.8AI score0.11926EPSS
SaveExploits1References3
NVD
NVD
added 2022/02/11 2:15 a.m.27 views

CVE-2022-24954

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpan="-2"' and 'draw colSpan="1"' substrings...

9.8CVSS0.11926EPSS
SaveExploits1References2
Prion
Prion
added 2022/02/11 2:15 a.m.19 views

Stack overflow

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpan="-2"' and 'draw colSpan="1"' substrings...

7.5CVSS9.4AI score0.11926EPSS
SaveExploits1References2Affected Software2
Cvelist
Cvelist
added 2022/02/11 1:40 a.m.38 views

CVE-2022-24954

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpan="-2"' and 'draw colSpan="1"' substrings...

9.7AI score0.11926EPSS
SaveExploits1References2
Zero Day Initiative
Zero Day Initiative
added 2022/02/10 12:00 a.m.30 views

Foxit PDF Reader XFA Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.2AI score0.01889EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/04 3:15 p.m.15 views

CVE-2021-45978

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via xfa.host.gotoURL in the XFA API...

7.8CVSS7.8AI score0.015EPSS
SaveExploits0References4
OSV
OSV
added 2022/01/04 3:15 p.m.10 views

CVE-2021-45978

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via xfa.host.gotoURL in the XFA API...

7.8CVSS7.4AI score0.015EPSS
SaveExploits0References3
Prion
Prion
added 2022/01/04 3:15 p.m.19 views

Code injection

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via xfa.host.gotoURL in the XFA API...

6.8CVSS7.8AI score0.015EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
added 2022/01/04 2:30 p.m.39 views

CVE-2021-45978

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via xfa.host.gotoURL in the XFA API...

8.1AI score0.015EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/08/12 12:00 a.m.36 views

Foxit Reader and Foxit PhantomPDF Denial of Service Vulnerability

Foxit Reader and Foxit PhantomPDF are both PDF document readers from Foxit, a Chinese company. Foxit Reader and PhantomPDF versions prior to 10.1.4 contain a security vulnerability that could be exploited by an attacker to invoke the stack via a recursive function during the processing of XFA for...

5CVSS4.2AI score0.00961EPSS
SaveExploits0Affected Software2
NVD
NVD
added 2021/08/11 10:15 p.m.36 views

CVE-2021-38569

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms or link objects...

7.5CVSS0.00961EPSS
SaveExploits0References1
Prion
Prion
added 2021/08/11 10:15 p.m.26 views

Design/Logic Flaw

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms or link objects...

5CVSS7.5AI score0.00961EPSS
SaveExploits0References1Affected Software2
ATTACKERKB
ATTACKERKB
added 2021/08/11 10:15 p.m.7 views

CVE-2021-38569

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms or link objects...

7.5CVSS7.1AI score0.00961EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/08/11 9:14 p.m.37 views

CVE-2021-38569

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms or link objects...

7.8AI score0.00961EPSS
SaveExploits0References1
CVE
CVE
added 2021/08/11 9:14 p.m.80 views

CVE-2021-38569

Foxit Reader and Foxit PhantomPDF are affected by a vulnerability fixed in 10.1.4 or later. The issue allows stack consumption via recursive function calls during handling of XFA forms or linked objects, which could lead to a denial of service. Affected products are Foxit Reader and Foxit Phantom...

7.5CVSS7.5AI score0.00961EPSS
SaveExploits0References1Affected Software2
NVD
NVD
added 2021/08/11 8:15 p.m.25 views

CVE-2021-33794

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA form interaction...

9.1CVSS0.01105EPSS
SaveExploits0References1
Rows per page
Query Builder