Lucene search
K

18 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-7777

Malware in sbrugna...

8.8CVSS8.8AI score0.00367EPSS
Exploits0References3
CNVD
CNVD
added 2018/08/01 12:0 a.m.5 views

Foxit Reader Type Obfuscation Remote Code Execution Vulnerability (CNVD-2018-14464)

Foxit Reader old name: Foxit PDF Reader is a set of software used to read PDF format files, by Fujian Foxit Software developed by Foxit Reader is a set of free to use the software, the operating system is mainly based on Microsoft Windows, and as long as there is a Win32 implementation of the...

8.8CVSS8.9AI score0.0025EPSS
Exploits0References1
Prion
Prion
added 2018/07/31 8:29 p.m.17 views

Type confusion

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS8.8AI score0.0025EPSS
Exploits0References2Affected Software2
OSV
OSV
added 2018/07/31 8:29 p.m.1 views

CVE-2018-14241

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.2AI score0.0025EPSS
Exploits0References2
CVE
CVE
added 2018/07/31 8:0 p.m.46 views

CVE-2018-14241

CVE-2018-14241 affects Foxit Reader (9.0.1.1049) and is a type-confusion/remote code execution flaw in the addAnnot method. Exploitation requires user interaction (the target visits a malicious page or opens a malicious file); an attacker can trigger the type confusion via JavaScript to execute c...

8.8CVSS8.8AI score0.0025EPSS
Exploits0References2Affected Software2
OSV
OSV
added 2018/05/17 3:29 p.m.0 views

CVE-2018-1177

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.1AI score
Exploits0References2
Prion
Prion
added 2018/05/17 3:29 p.m.15 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS8.8AI score0.00367EPSS
Exploits0References2Affected Software2
CNVD
CNVD
added 2018/04/28 12:0 a.m.1 views

Foxit Reader addAnnot Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the addAnnot method, which can be exploited to execute arbitrary code in the context of the current process, due to a lack of validation before performing operations on objects...

8.8CVSS7.8AI score0.00367EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/04/20 12:0 a.m.21 views

Foxit Reader addAnnot Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

6.8CVSS1.9AI score0.00367EPSS
Exploits0References1
CNVD
CNVD
added 2017/12/21 12:0 a.m.1 views

Foxit Reader addAnnot Method Remote Code Execution Vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A remote code execution vulnerability exists in the addAnnot method of Foxit Reader version 8.3.2.25013, where the program fails to adequately verify the existence of an object before performing an operation on it. A...

8.8CVSS8.1AI score0.00367EPSS
Exploits0References1
OSV
OSV
added 2017/12/20 2:29 p.m.2 views

CVE-2017-16586

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.2.25013. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.1AI score0.00367EPSS
Exploits0References2
NVD
NVD
added 2017/12/20 2:29 p.m.13 views

CVE-2017-16586

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.2.25013. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS8.8AI score0.00367EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2017/12/20 2:29 p.m.1 views

CVE-2017-16586

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.2.25013. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.2AI score0.00367EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2017/12/20 2:0 p.m.20 views

CVE-2017-16586

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.2.25013. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8AI score0.00367EPSS
Exploits0References2
CVE
CVE
added 2017/12/20 2:0 p.m.51 views

CVE-2017-16586

CVE-2017-16586 affects Foxit Reader 8.3.2.25013 (Windows) with a use-after-free-like flaw in addAnnot that fails to validate object existence before performing operations, enabling remote code execution under the current process when a user opens a malicious page or file. Exploitation requires us...

8.8CVSS8.8AI score0.00367EPSS
Exploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2017/11/14 12:0 a.m.17 views

Foxit Reader addAnnot Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the addAnnot method...

6.8CVSS8.7AI score0.00367EPSS
Exploits0References1
Check Point Advisories
Check Point Advisories
added 2017/08/08 12:0 a.m.1 views

Adobe Acrobat and Reader Use After Free (APSB17-24: CVE-2017-11254)

A use-after-free vulnerability exists in Adobe Acrobat and Acrobat Reader. The vulnerability is dueto an error while processing addAnnot method. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted document...

6.8CVSS8.7AI score0.12165EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2017/04/21 12:0 a.m.32 views

Foxit Reader addAnnot Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the addAnnot method...

6.8CVSS7AI score
Exploits0References1
Rows per page
Query Builder