CVE-2020-10900

Foxit Reader/PhantomPDF 9.7.1.29511 on Windows is vulnerable to remote code execution via AcroForms processing. The root cause is a failure to validate an object’s existence before performing operations, effectively a use-after-free style flaw exposed when a user opens a malicious file or visits ...

CVE-2020-10899

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-10899

CVE-2020-10899 affects Foxit Reader/PhantomPDF up to version 9.7.1.29511. The flaw resides in XFA template processing where the code fails to validate an object’s existence before operations, enabling remote code execution when a user opens a malicious file/page. Exploitation requires user intera...

CVE-2020-10900: Use After Free

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-10906: Use After Free

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit Reader / Foxit PDF Reader Installed (Mac OS X)

Binary data macosxfoxitreaderinstalled.nbin...

CVE-2020-10899: Use After Free

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-10907: Use After Free

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit Reader < 9.7.2 Multiple Vulnerabilities

According to its version, the Foxit Reader application installed on the remote Windows host is prior to 9.7.2. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C...

Foxit Reader and PhantomPDF Resource Management Error Vulnerability

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A resource management error vulnerability exists in Foxit Reader and PhantomPDF 9.7.1.29511 and earlier versions for Windows platforms, where the program fails to verify the existence of an object before...

Foxit Reader and PhantomPDF Resource Management Error Vulnerability (CNVD-2020-24465)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A resource management error vulnerability exists in AcroForms handling in Foxit Reader and Foxit PhantomPDF 9.7.1.29511 and earlier versions for Windows platforms, where the program fails to validate the...

Foxit Reader and PhantomPDF Resource Management Error Vulnerability (CNVD-2020-24464)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A resource management error vulnerability exists in the handling of XFA templates in Foxit Reader and Foxit PhantomPDF 9.7.1.29511 and earlier versions on Windows platforms, which stems from the program...

Foxit Reader and PhantomPDF Arbitrary File Write Vulnerability

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in the communication API of Foxit Reader and Foxit PhantomPDF 9.7.1.29511 and earlier versions for Windows platforms. The vulnerability can be exploited by an attacker to...

Foxit Reader and PhantomPDF Type Confusion Remote Code Execution Vulnerability

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in the handling of the Save command in Foxit Reader and Foxit PhantomPDF 9.7.1.29511 and earlier versions for Windows platforms, which stems from the program failing to...

Foxit Reader and PhantomPDF communication API Arbitrary File Write Vulnerability

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in the communication API in Foxit Reader and Foxit PhantomPDF 9.7.1.29511 and earlier versions for Windows platforms. The vulnerability can be exploited to execute arbitra...

Foxit Reader and PhantomPDF Type Obfuscation Remote Code Execution Vulnerability (CNVD-2020-24448)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in the handling of the OCRAndExportToExcel command in Foxit Reader and Foxit PhantomPDF 9.7.1.29511 and earlier versions for Windows-based platforms, which stems from the...

Foxit Reader and PhantomPDF Type Obfuscation Remote Code Execution Vulnerability (CNVD-2020-244444)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in the handling of the AddWatermark command in Foxit Reader and Foxit PhantomPDF 9.7.1.29511 and earlier versions for Windows-based platforms, which stems from the program...

Foxit Reader and PhantomPDF Type Obfuscation Remote Code Execution Vulnerability (CNVD-2020-24445)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in the handling of the RotatePage command in Foxit Reader and Foxit PhantomPDF 9.7.1.29511 and earlier versions for Windows-based platforms, which stems from the program's...

Foxit Reader and PhantomPDF Type Obfuscation Remote Code Execution Vulnerability (CNVD-2020-24447)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in the handling of the SetFieldValue command in Foxit Reader and Foxit PhantomPDF 9.7.1.29511 and earlier versions for Windows-based platforms, which stems from the progra...

Foxit Reader and PhantomPDF Type Obfuscation Remote Code Execution Vulnerability (CNVD-2020-24446)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in the handling of the GetFieldValue command in Foxit Reader and Foxit PhantomPDF 9.7.1.29511 and earlier versions for Windows-based platforms, which stems from the progra...