10642 matches found
CVE-2021-31456
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Design/Logic Flaw
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Design/Logic Flaw
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
Design/Logic Flaw
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2021-31470
CVE-2021-31470 affects Foxit Reader 10.1.1.37576. The issue is a parsing/use-after-free in handling of U3D objects within PDFs, caused by not validating the existence of an object before performing operations. This can enable remote code execution with the current process context when a user visi...
CVE-2021-31471
This CVE (CVE-2021-31471) affects Foxit Reader 10.1.1.37576 and relates to information disclosure via U3D object handling in PDFs. The root cause is improper validation of user-supplied data that can lead to reading past the end of an allocated object. The Red Hat, CNVD, CNNVD, CNVD, and ZDI entr...
CVE-2021-31469
Foxit Reader 10.1.1.37576 contains an information-disclosure/ out-of-bounds vulnerability in the handling of U3D objects embedded in PDF files. The issue arises from insufficient validation of user-supplied data, allowing read past the end of an allocated object. Exploitation requires user intera...
CVE-2021-31468
Foxit Reader 10.1.3.37598 contains a U3D file parsing vulnerability in PDFs that allows remote code execution. The flaw stems from missing validation of user-supplied data, causing an out-of-bounds read past an allocated object. Exploitation requires the user to open a malicious PDF (or visit a m...
CVE-2021-31468
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2021-31466
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2021-31465
CVE-2021-31465 affects Foxit Reader 10.1.3.37598. The vulnerability is in the handling of U3D objects within PDF files and stems from insufficient validation of user-supplied data, leading to a write past the end of an allocated data structure. This can allow a remote attacker to execute code in ...
CVE-2021-31464
CVE-2021-31464 affects Foxit Reader 10.1.3.37598 via U3D file parsing in PDFs. Root cause: lack of proper validation leads to an out-of-bounds read in embedded U3D handling, enabling information disclosure when a user opens a malicious file/page or visits a crafted page. Documented impact is info...
CVE-2021-31463
CVE-2021-31463 affects Foxit Reader 10.1.3.37598. The vulnerability stems from improper validation in the handling of U3D objects embedded in PDF files, causing an out-of-bounds read that can disclose sensitive information. Exploitation requires user interaction (the target must open a malicious ...
CVE-2021-31464
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2021-31462
Foxit Reader 10.1.3.37598 is affected by a U3D file parsing vulnerability that leads to information disclosure. The issue arises from improper validation of user-supplied data when handling embedded U3D objects in PDFs, allowing a read past the end of an allocated object. Exploitation requires us...
CVE-2021-31462
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2021-31461
Foxit Reader 10.1.1.37576 is affected by a type-confusion vulnerability in the handling of app.media objects. The flaw stems from insufficient validation of user-supplied data, enabling remote attackers to execute arbitrary code in the target process after the user visits a malicious page or open...
CVE-2021-31460
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2021-31459
Foxit Reader 10.1.1.37576 is affected by a vulnerability in XFA Forms where code paths operate on an object without validating its existence, enabling remote code execution. Exploitation requires user interaction (viewing a malicious page or opening a malicious file). The root cause is a lack of ...