CVE-2018-14316

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2018-14283

CVE-2018-14283 affects Foxit Reader (Windows) versions older than 9.2.0.9097. The flaw is in the highlightMode attribute and stems from not validating the existence of an object before performing operations on it, leading to a use-after-free condition that enables remote code execution under the ...

CVE-2018-14297

CVE-2018-14297 affects Foxit Reader (and Foxit PhantomPDF in some listings). The vulnerability is a use-after-free in the processing of FreeText annotations, where manipulating a document’s elements can cause a freed pointer to be reused, enabling remote code execution. Exploitation requires user...

CVE-2018-14296

Foxit Reader Circle Annotation use-after-free remote-code-execution vulnerability (CVE-2018-14296) affects Foxit Reader 9.0.1.5096 and earlier; exploits require user interaction (open a malicious file/page). The flaw lies in processing Circle annotations, where a pointer can be reused after free,...

CVE-2018-14254

CVE-2018-14254 affects Foxit Reader (notably 9.0.1.1049) where a type confusion in the getLinks method can be triggered by JavaScript on a malicious page or file, allowing remote code execution under the process context. Multiple connected sources corroborate a getLinks-based type confusion with ...

CVE-2018-14282

CVE-2018-14282 affects Foxit Reader prior to 9.2.0.9097. The vulnerability is a FlateDecode stream handling issue caused by an uninitialized pointer, enabling remote code execution under the current process when a user opens a malicious file or visits a malicious page. Exploitation requires user ...

CVE-2018-14311

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...

Foxit Reader < 9.2 Multiple Vulnerabilities

The version of Foxit Reader installed on the remote Windows host is prior to 9.2. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111377; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate",...

Foxit Reader ExpaseFDF Arbitrary File Writing Remote Code Execution Vulnerability

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A security vulnerability exists in the 'exportAsFDF XFA' function in Foxit Reader 9.1.0.5096 and earlier versions for Windows based platforms, which stems from the program not...

Foxit Reader Memory Misreference Vulnerability (CNVD-2018-14450)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of events in Foxit Reader 9.1.0.5096 and earlier versions for Windows platforms, where the program fails to verify the...

Foxit Reader XFA ONOFBOY Type Obfuscation Remote Code Execution Vulnerability

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A type-obfuscated remote code execution vulnerability exists in the handling of the oneOfChild attribute in Foxit Reader 9.1.0.5096 and earlier versions for Windows platforms,...

Foxit Reader Remote Code Execution Vulnerability (CNVD-2018-14068)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A security vulnerability exists in the handling of the FlateDecode stream in Foxit Reader for Windows 9.1.0.5096 and earlier versions, where the program does not properly...

Foxit Reader ReSETFABLE Type Obfuscation Remote Code Execution Vulnerability

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A type-obfuscated remote code execution vulnerability exists in the resetForm method of Foxit Reader 9.1.0.5096 and earlier versions for Windows. A remote attacker can exploit...

Foxit Reader Buffer Overflow Vulnerability (CNVD-2018-13985)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A heap-based buffer overflow vulnerability exists in the parsing of PDF documents in Foxit Reader 9.1.0.5096 and earlier versions for Windows platforms, where the program fails ...

Foxit Reader setFocus Type Obfuscation Remote Code Execution Vulnerability

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A type-obfuscated remote code execution vulnerability exists in the handling of parameters passed into the 'setFocus' function in Foxit Reader 9.1.0.5096 and earlier versions fo...

Foxit Reader Memory Misreference Vulnerability (CNVD-2018-14148)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of Link objects in Foxit Reader 9.1.0.5096 and earlier versions for Windows. A remote attacker can exploit this...

Foxit Reader Memory Misreference Vulnerability (CNVD-2018-14149)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference exists in the handling of button objects in Foxit Reader 9.1.0.5096 and earlier versions for Windows. A remote attacker can exploit this vulnerability by...

Foxit Reader Memory Misreference Vulnerability (CNVD-2018-14150)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of PolyLine annotations in Foxit Reader 9.1.0.5096 and earlier versions for Windows. A remote attacker can exploit thi...

Foxit Reader Memory Misreference Vulnerability

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of FileAttachment annotations in Foxit Reader 9.1.0.5096 and earlier versions for Windows. A remote attacker can explo...

Foxit Reader Memory Misreference Vulnerability (CNVD-2018-14147)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of the 'valueAsString' function in Foxit Reader 9.1.0.5096 and earlier versions for Windows platforms, where the progr...