Foxit Reader 安全漏洞

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A security vulnerability exists in Foxit Reader version 2024.3.0.26795, which originates from a post-release reuse vulnerability contained in the checkbox CBFWidget object. An attacker can exploit this vulnerability to cause...

CVE-2024-47810: Use After Free

A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs ...

CVE-2024-49576: Use After Free

A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBFWidget object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An...

PT-2024-10303 · Foxit · Foxit Reader

Name of the Vulnerable Software and Affected Versions: Foxit Reader version 2024.3.0.26795 Description: A use-after-free vulnerability exists in the way Foxit Reader handles a 3D page object. This can be triggered by a specially crafted Javascript code inside a malicious PDF document, leading to...

Foxit Reader 安全漏洞

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A memory misreference vulnerability exists in Foxit Reader version 2024.3.0.26795, which arises from a messed up instruction in a 3D page object responsible for freeing memory. An attacker could use this vulnerability to cause...

Foxit Reader 3D Page Object Use-After-Free Vulnerability

Talos Vulnerability Report TALOS-2024-2094 Foxit Reader 3D Page Object Use-After-Free Vulnerability December 18, 2024 CVE Number CVE-2024-47810 SUMMARY A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascript code inside...

Foxit Reader Checkbox Calculate CBF_Widget Use-After-Free Vulnerability

Talos Vulnerability Report TALOS-2024-2093 Foxit Reader Checkbox Calculate CBFWidget Use-After-Free Vulnerability December 18, 2024 CVE Number CVE-2024-49576 SUMMARY A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBFWidget object. A specially craft...

KLA78282 Multiple vulnerabilities in Foxit Reader

Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. Use after free vulnerability can be exploited to cause denial of service or...

Foxit Reader Multiple Vulnerabilities (Dec 2024) - Windows

Foxit Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:foxitsoftware:reader";...

The vulnerability affects the AcroForm component of the PDF viewer software from Foxit PDF Reader (previously Foxit Reader) and the PDF editor software from Foxit PDF Editor (previously Foxit PhantomPDF). This vulnerability allows a malicious individual to execute arbitrary code.

The vulnerability of the AcroForm component in the PDF viewer application, Foxit PDF Reader formerly Foxit Reader, and the PDF editing application, Foxit PDF Editor formerly Foxit PhantomPDF, is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker...

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the use of memory after it is freed, allowing an attacker to disclose protected information.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of memory after it is freed during the processing of Doc objects. Exploiting this vulnerability can allow ...

CVE-2024-9255

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

CVE-2024-9246

Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit...

CVE-2024-9248

Foxit PDF Reader PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2024-9244 Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on the...

CVE-2024-9244: Incorrect Permission Assignment for Critical Resource

Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on the...

Foxit PDF Reader 缓冲区错误漏洞

Foxit PDF Reader is a PDF reader from the Chinese company Foxit. A buffer error vulnerability exists in Foxit PDF Reader, which stems from an out-of-bounds read contained in the Annotation feature, resulting in an information disclosure vulnerability...

Foxit PDF Reader 资源管理错误漏洞

Foxit PDF Reader is a Chinese Foxit Foxit company's a PDF reader. A resource management error vulnerability exists in Foxit PDF Reader, which stems from the AcroForm feature that contains a reuse-after-release, leading to information disclosure vulnerability. No details of the vulnerability are...

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created PDF file...

The vulnerability affects the AcroForm Handler component of the PDF Foxit Reader software for viewing electronic documents (formerly Foxit Reader) and the Foxit PDF Editor software for editing PDF files (formerly Foxit PhantomPDF). This vulnerability allows a malicious actor to execute arbitrary code.

The vulnerability of the AcroForm Handler component in the PDF Foxit Reader software formerly Foxit Reader and the Foxit PDF Editor software for editing PDF files is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using...