CVE-2021-45979

CVE-2021-45979 affects Foxit PDF Reader and PDF Editor on macOS prior to 11.1. The issue allows an attacker to execute arbitrary code via the JavaScript API function app.launchURL, enabling remote code execution if a user opens a malicious document or triggers the affected API. The connected sour...

PT-2022-12480

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader and PDF Editor versions prior to 11.1 Description The issue allows remote attackers to execute arbitrary code via app.launchURL in the JavaScript API. This can be exploited to gain unauthorized access and control over the...

Foxit PDF Reader 操作系统命令注入漏洞

Foxit PDF Reader is a PDF reader from the Chinese company Foxit. An operating system command injection vulnerability exists in Foxit PDF Reader and PDF Editor, which originates from Foxit PDF Reader and PDF Editor before 11.1 on macOS that allows remote attackers to exploit the vulnerability to...

PT-2019-9811

Name of the Vulnerable Software and Affected Versions Foxit Reader SDK ActiveX Professional version 5.4.0.1031 Description A command injection issue can occur when processing specially crafted PDF files, allowing an attacker to potentially gain remote code execution. This issue is related to the...

CVE-2018-19445: Improper Neutralization of Special Elements used in a Command

A command injection can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031 when the JavaScript API app.launchURL is used. An attacker can leverage this to gain remote code execution...

CVE-2017-10951: Improper Neutralization of Special Elements used in an OS Command

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

PT-2017-11630

Name of the Vulnerable Software and Affected Versions Foxit Reader version 8.3.0.14878 Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fla...

KLA11093 Arbitrary code execution vulnerabilities in Foxit Reader

Multiple serious vulnerabilities have been found in Foxit Reader and Foxit PhantomPDF. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. An improper validation of user-supplied data in the saveAs Java script function can b...

Nitro Pro PDF - Multiple Vulnerabilities

Vulnerabilities Summary The following advisory describes three vulnerabilities found in Nitro / Nitro Pro PDF. Nitro Pro is the PDF reader and editor that does everything you will ever need to do with PDF files. The powerful but snappy editor lets you change PDF documents with ease, and comes wit...

CVE-2015-7614

Technical details about CVE-2015-7614 are not publicly available in the provided documents. Monitor for updates from official advisories; the connected EUVD entries do not supply product/version/impact specifics.

CVE-2015-7614: Undefined Security Weakness

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions and execute...