CVE-2021-21870

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.4.37651. A specially crafted PDF document can trigger the reuse of previously free memory, which can lead to arbitrary code execution. An attacker needs to trick the user into opening a...

Foxit PhantomPDF < 10.1.5 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 10.1.5. It is, therefore affected by multiple vulnerabilities: - This vulnerability allows remote attackers to execute arbitrary code on affected installations of...

CVE-2021-21870

CVE-2021-21870 is a use-after-free vulnerability in Foxit Software’s PDF Reader JavaScript engine (affected version 10.1.4.37651). A specially crafted PDF can trigger reuse of freed memory, enabling arbitrary code execution when a user opens a malicious file or site, particularly if the browser p...

Foxit PDF Editor (PhantomPDF) < 11.0.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor application formally known as PhantomPDF installed on the remote Windows host is prior to 11.0.1. It is, therefore affected by multiple vulnerabilities: - Multiple remote code execution vulnerabilities exist in Foxit PDF Editor due to a use-after-fre...