Lucene search
+L

5419 matches found

CNVD
CNVD
added 2020/12/11 12:0 a.m.5 views

Denial of Service Vulnerability in Foxit Reader

Foxit Reader is a PDF document reader. Foxit Reader has a denial of service vulnerability that can be exploited by attackers to cause a denial of service in the application...

7AI score
SaveExploits0
NCSC
NCSC
added 2020/12/10 12:0 a.m.6 views

Vulnerabilities fixed in Foxit Reader and Foxit PhantomPDF

Foxit has fixed vulnerabilities in Foxit Reader and Foxit PhantomPDF. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights Foxit has released...

8.8CVSS7.5AI score0.70388EPSS
SaveExploits5
CNNVD
CNNVD
added 2020/12/09 12:0 a.m.13 views

Foxit Reader 资源管理错误漏洞

Foxit Reader is a PDF document reader. A type confusion vulnerability exists in Foxit Reader, which can be exploited by a remote attacker to submit a special file request and trick the user into parsing it, which can crash the application or execute arbitrary code in the application context...

8.8CVSS7.7AI score0.02869EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2020/12/09 12:0 a.m.9 views

Foxit Reader 资源管理错误漏洞

Foxit Reader is a PDF document reader. A memory misreference vulnerability exists in Foxit Reader, which allows remote attackers to submit a special file request that can be exploited to trick the user into parsing it, which can crash the application or execute arbitrary code in the application...

8.8CVSS7.7AI score0.02929EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2020/12/09 12:0 a.m.8 views

Adobe Reader 资源管理错误漏洞

Foxit Reader is a PDF document reader. A memory misreference vulnerability exists in Foxit Reader, which allows remote attackers to submit a special file request that can be exploited to trick the user into parsing it, which can crash the application or execute arbitrary code in the application...

8.8CVSS6.2AI score0.65804EPSS
SaveExploits1References2
Talos
Talos
added 2020/12/09 12:0 a.m.123 views

Foxit Reader JavaScript media openPlayer type confusion vulnerability

Summary A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger an improper use of an object, resulting in memory corruption and arbitrary code execution. An attacker needs to trick the...

8.8CVSS9AI score0.02869EPSS
SaveExploits1
Talos
Talos
added 2020/12/09 12:0 a.m.55 views

Foxit Reader Javascript Field fileSelect Use After Free Vulnerability

Summary A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open t...

8.8CVSS8.7AI score0.65804EPSS
SaveExploits1
Talos
Talos
added 2020/12/09 12:0 a.m.88 views

Foxit Reader JavaScript remove template use-after-free vulnerability

Summary A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger the reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the...

8.8CVSS8.6AI score0.02239EPSS
SaveExploits1
Zero Day Initiative
Zero Day Initiative
added 2020/12/09 12:0 a.m.35 views

Foxit Reader XFA Template Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of XFA...

7.8CVSS2.4AI score0.03554EPSS
SaveExploits0References1
Talos
Talos
added 2020/12/09 12:0 a.m.99 views

Foxit Reader JavaScript choice field use-after-free vulnerability

Summary A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open t...

8.8CVSS9.2AI score0.70388EPSS
SaveExploits1
CNNVD
CNNVD
added 2020/12/09 12:0 a.m.10 views

Foxit Reader 资源管理错误漏洞

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A security vulnerability exists in Foxit PDF Reader 10.1.0.37527, which stems from a specially crafted PDF document that can trigger the reuse of previously free memory, which could lead to the execution of arbitrary code. The...

8.8CVSS6AI score0.02239EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2020/12/09 12:0 a.m.8 views

Foxit Reader 资源管理错误漏洞

Foxit Reader is a PDF document reader. A memory misreference vulnerability exists in Foxit Reader, which allows remote attackers to submit a special file request that can be exploited to trick the user into parsing it, which can crash the application or execute arbitrary code in the application...

8.8CVSS7.7AI score0.70388EPSS
SaveExploits1References2
Kaspersky
Kaspersky
added 2020/12/09 12:0 a.m.81 views

KLA12028 Multiple vulnerabilities in Foxit Reader and Foxit PhantomPDF

Multiple vulnerabilities were found in Foxit Reader and Foxit PhantomPDF. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in PDF file can be exploited remotely to...

8.8CVSS8.9AI score0.70388EPSS
SaveExploits5References4
CNVD
CNVD
added 2020/11/30 12:0 a.m.0 views

Denial of Service Vulnerability in Foxit Reader (CNVD-2020-70504)

Foxit Reader Foxit Reader is a small PDF document reader. Foxit Reader has a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

6.8AI score
SaveExploits0
zdt
zdt
added 2020/11/27 12:0 a.m.89 views

Foxit Reader 9.0.1.1049 - Arbitrary Code Execution Exploit

Exploit Title: Foxit Reader 9.0.1.1049 - Arbitrary Code Execution Exploit Author: CrossWire Vendor Homepage: https://www.foxitsoftware.com/ Software Link: https://www.foxitsoftware.com/downloads/latest.php?product=Foxit-Reader&platform=Windows&version=9.0.1.1049&packagetype=exe&language=English...

8.8CVSS0.4AI score0.62922EPSS
SaveExploits14
Exploit DB
Exploit DB
added 2020/11/27 12:0 a.m.1129 views

Foxit Reader 9.0.1.1049 - Arbitrary Code Execution

Exploit Title: Foxit Reader 9.0.1.1049 - Arbitrary Code Execution Date: 2020-08-29 Exploit Author: CrossWire Vendor Homepage: https://www.foxitsoftware.com/ Software Link:...

8.8CVSS7.8AI score0.62922EPSS
SaveExploits14
Packet Storm
Packet Storm
added 2020/11/26 12:0 a.m.410 views

Foxit Reader 9.0.1.1049 Arbitrary Code Execution

Exploit Title: Foxit Reader 9.0.1.1049 - Arbitrary Code Execution Date: August 29, 2020 Exploit Author: CrossWire Vendor Homepage: https://www.foxitsoftware.com/ Software Link:...

6.8CVSS0.9AI score0.62922EPSS
SaveExploits14
CNVD
CNVD
added 2020/11/04 12:0 a.m.3 views

Foxit Reader Command Injection Vulnerability

Foxit is a professional electronic document technology solutions provider. Foxit Reader, one of Foxit's outstanding products, is currently one of the most popular PDF readers worldwide. A command injection vulnerability exists in the app.opencPDFWebPage JavsScript API product in Foxit Reader, whi...

7.8CVSS7.6AI score0.40782EPSS
SaveExploits3References1
NCSC
NCSC
added 2020/11/03 12:0 a.m.8 views

Vulnerability fixed in Foxit Reader

A vulnerability has been fixed in Foxit Reader. Due to the vulnerability makes it possible for a malicious person to execute arbitrary code under the user's privileges. To do this, however, the user must be tricked into opening a rogue file or to perform a specific action within the application...

7.8CVSS7.2AI score0.40782EPSS
SaveExploits3
OSV
OSV
added 2020/11/02 9:15 p.m.5 views

CVE-2020-14425

Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API. An attacker can execute local files and bypass the security dialog...

7.8CVSS7.2AI score0.40782EPSS
SaveExploits3References3
Rows per page
Query Builder