Foxit PhantomPDF Multiple Vulnerabilities (June-3 2024)

Foxit PhantomPDF is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:foxitsoftware:phantompdf";...

CVE-2023-27330

CVE-2023-27330 describes a remote code execution flaw in Foxit PDF Reader tied to the handling of XFA annotations. The root cause is the lack of validating the existence of an Annotation object before performing operations, enabling an attacker to run code in the process context after a user open...

Foxit PhantomPDF < 10.1.11 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 10.1.11. It is, therefore affected by multiple vulnerabilities: - Addressed a potential issue where the application could be exposed to Use-after-Free vulnerabilit...

Foxit PDF Editor < 11.2.5 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 11.2.5. It is, therefore affected by multiple vulnerabilities: - Addressed a potential issue where the application could be exposed to Use-after-Free...

Foxit PDF Editor < 12.1.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 12.1.1. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the...

KLA48514 Multiple vulnerabilities in Foxit PDF Reader

Use After Free vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Original advisories Security updates available in Foxit PDF Reader 11.2.1 and Foxit PDF Editor 11.2.2 Exploitation Public exploits exist...