6555 matches found
CVE-2020-13806: Use After Free
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has a use-after-free because of JavaScript execution after a deletion or close operation...
CVE-2019-20837: Improper Verification of Cryptographic Signature
An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It allows signature validation bypass via a modified file or a file with non-standard signatures...
CVE-2019-20827: Out-of-bounds Write
An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It allows stack consumption because of interaction between ICC-Based color space and Alternate color space...
CVE-2020-13807: Loop with Unreachable Exit Condition
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has circular reference mishandling that causes a loop...
PT-2020-13693
Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.2 PhantomPDF versions prior to 9.7.2 Description An issue allows resource consumption via long strings in the content stream. Recommendations For Foxit Reader versions prior to 9.7.2, update to version 9.7.2 ...
PT-2020-13698
Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.1 PhantomPDF versions prior to 9.7.1 Description The issue is related to a use-after-free error that occurs when processing a document that lacks a dictionary. Recommendations For Foxit Reader versions prior ...
CVE-2020-13809: Uncontrolled Resource Consumption
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via long strings in the content stream...
CVE-2020-13804: Use of Hard-coded Credentials
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows information disclosure of a hardcoded username and password in the DocuSign plugin...
PT-2020-13692
Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7.2 Description An issue allows resource consumption via crafted cross-reference stream data. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.7.2, update to version 9.7.2 or...
PT-2020-13691
Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.2 PhantomPDF versions prior to 9.7.2 Description The issue is related to circular reference mishandling, which causes a loop. Recommendations For Foxit Reader versions prior to 9.7.2, update to version 9.7.2 ...
CVE-2018-21240: Uncontrolled Resource Consumption
An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows memory consumption via an ArrayBuffer0xfffffffe call...
CVE-2019-20830: Out-of-bounds Write
An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has an out-of-bounds write when Internet Explorer is used...
CVE-2018-21236: NULL Pointer Dereference
An issue was discovered in Foxit Reader before 2.4.4. It has a NULL pointer dereference...
CVE-2018-21239: Insufficiently Protected Credentials
An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows NTLM credential theft via a GoToE or GoToR action...
CVE-2019-20828: Buffer Copy without Checking Size of Input
An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs...
CVE-2019-20831: Undefined Security Weakness
An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.5.0.20733. It has void data mishandling, causing a crash...
CVE-2019-20818: Allocation of Resources Without Limits or Throttling
An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows memory consumption because data is created for each page of an application level...
CVE-2019-20822: Out-of-bounds Write
An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.7.0.29430. It has an out-of-bounds write via incorrect image data...
CVE-2019-20820: NULL Pointer Dereference
An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference during the parsing of file data...