CVE-2020-26535: Out-of-bounds Write

An issue was discovered in Foxit Reader and PhantomPDF before 10.1. If TslAlloc attempts to allocate thread local storage but obtains an unacceptable index value, V8 throws an exception that leads to a write access violation and read access violation...

CVE-2020-26536: NULL Pointer Dereference

An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is a NULL pointer dereference via a crafted PDF document...

CVE-2020-26539: Use After Free

An issue was discovered in Foxit Reader and PhantomPDF before 10.1. When there is a multiple interpretation error for /V in the Additional Action and Field dictionaries, a use-after-free can occur with resultant remote code execution or an information leak...

CVE-2020-26534: Use After Free

An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is an Opt object use-after-free related to Field::ClearItems and Field::DeleteOptions, during AcroForm JavaScript execution...

CVE-2020-26537: Out-of-bounds Write

An issue was discovered in Foxit Reader and PhantomPDF before 10.1. In a certain Shading calculation, the number of outputs is unequal to the number of color components in a color space. This causes an out-of-bounds write...

CVE-2020-26538: Uncontrolled Search Path Element

An issue was discovered in Foxit Reader and PhantomPDF before 10.1. It allows attackers to execute arbitrary code via a Trojan horse taskkill.exe in the current working directory...

CVE-2020-26540: Improper Verification of Cryptographic Signature

An issue was discovered in Foxit Reader and PhantomPDF before 4.1 on macOS. Because the Hardened Runtime protection mechanism is not applied to code signing, code injection or an information leak can occur...

PT-2020-16448

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 4.1 Description An issue was discovered where the Hardened Runtime protection mechanism is not applied to code signing, allowing code injection or an information leak to occur. Recommendations For...

PT-2020-16446

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 10.1 PhantomPDF versions prior to 10.1 Description An issue allows attackers to execute arbitrary code via a Trojan horse taskkill.exe in the current working directory. Recommendations For Foxit Reader versions...

PT-2020-16444

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 10.1 Foxit PhantomPDF versions prior to 10.1 Description An issue was discovered that allows for a NULL pointer dereference via a crafted PDF document. Recommendations For Foxit Reader versions prior to 10.1,...

PT-2020-16445

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 10.1 Foxit PhantomPDF versions prior to 10.1 Description An issue was discovered in a certain Shading calculation where the number of outputs is unequal to the number of color components in a color space, causing...

PT-2020-16443

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 10.1 PhantomPDF versions prior to 10.1 Description An issue was discovered that leads to a write access violation and a read access violation when TslAlloc attempts to allocate thread local storage but obtains an...

PT-2020-16447

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 10.1 Foxit PhantomPDF versions prior to 10.1 Description An issue was discovered that can lead to a use-after-free error, potentially resulting in remote code execution or an information leak. This occurs when...

Denial of Service Vulnerability in Foxit PDF Reader

Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. A denial of service vulnerability exists in Foxit Reader, which can be exploited by attackers to cause a denial of service...

Foxit Reader Remote Code Execution Vulnerability (CNVD-2020-62463)

Foxit Reader is a PDF document reader. A remote code execution vulnerability exists in the handling of annotated objects in Foxit Reader 10.0.1.35811 and earlier versions. The vulnerability stems from a failure to verify the existence of an object before performing an operation on it. An attacker...

Foxit Reader Remote Code Execution Vulnerability (CNVD-2020-62462)

Foxit Reader is a PDF document reader. A remote code execution vulnerability exists in the parsing of JPEG2000 images in Foxit Reader 10.0.1.35811 and earlier versions. The vulnerability stems from improper validation of user-supplied data. An attacker can exploit the vulnerability to execute cod...

Foxit Reader Elevation of Privilege Vulnerability

Foxit Reader is a PDF document reader. An elevation of privilege vulnerability exists in Foxit Reader 10.0.1.35811 and earlier versions in the handling of configuration files used by the update service. The vulnerability stems from incorrect privilege settings on resources used by the update...

Foxit Reader JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPEG20...

Foxit Reader AcroForm Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

Foxit Reader Update Service Incorrect Permission Assignment Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Foxit Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the...