6555 matches found
CVE-2020-13548
In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting...
Design/Logic Flaw
In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting...
CVE-2020-13548
In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting...
CVE-2020-13548
CVE-2020-13548 – Foxit Reader is affected when a specially crafted PDF (11) triggers reuse of previously freed memory, enabling arbitrary code execution. Affected product/version (per sources): Foxit Reader 10.1.0.37527 (and related Foxit Reader/PhantomPDF components). Attack vector: user must op...
CVE-2020-13548: Use After Free
In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting...
The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to memory usage after its release, allows a hacker to execute arbitrary code.
The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program lies in the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to data conversion errors, allows a perpetrator to execute arbitrary code.
The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program is related to data type conversion errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to memory usage after its release, allows a hacker to execute arbitrary code.
The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program lies in the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Foxit Reader and PhantomPDF Competitive Conditions Vulnerability (CNVD-2021-04403)
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker could exploit the vulnerability to cause a stack buffer overflow or an out-of-bounds read...
Foxit Reader and PhantomPDF Competitive Conditions Vulnerability (CNVD-2021-04402)
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker could exploit the vulnerability to cause a stack buffer overflow or an out-of-bounds read...
Foxit Reader and PhantomPDF Competitive Conditions Vulnerability (CNVD-2021-04401)
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF, which can be exploited by attackers to cause a stack buffer overflow or an out-of-bounds read...
Foxit Reader and PhantomPDF Competitive Conditions Vulnerability (CNVD-2021-04399)
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker could exploit the vulnerability to cause a stack buffer overflow or out-of-bounds read...
Foxit Reader and PhantomPDF Competitive Conditions Vulnerability (CNVD-2021-04398)
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker could exploit the vulnerability to cause a stack buffer overflow or out-of-bounds read...
Foxit Reader and PhantomPDF Competitive Conditions Vulnerability (CNVD-2021-04397)
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker could exploit the vulnerability to cause a stack buffer overflow or out-of-bounds read...
Foxit Reader and PhantomPDF Competitive Conditions Vulnerability (CNVD-2021-04404)
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker could exploit the vulnerability to cause a stack buffer overflow or an out-of-bounds read...
Foxit Reader and PhantomPDF Competitive Conditions Vulnerability (CNVD-2021-04400)
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker could exploit the vulnerability to cause a stack buffer overflow or an out-of-bounds read...
CVE-2018-18689
The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, a Signature Wrapping vulnerability exists in multiple products. An attacker can use /ByteRange and xref manipulations that are not detected...
CVE-2018-20316
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read, a different issue than CVE-2018-20310 because of a different opcode...