Foxit Reader and PhantomPDF Resource Management Error Vulnerability (CNVD-2020-24461)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A resource management error vulnerability exists in the resetForm method in Foxit Reader and Foxit PhantomPDF 9.7.1.29511 and earlier versions for Windows platforms, which arises from the program failing...

Foxit Reader and PhantomPDF Type Obfuscation Remote Code Execution Vulnerability (CNVD-2020-24443)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in the handling of the Export command in Foxit Reader and Foxit PhantomPDF 9.7.1.29511 and earlier versions for Windows platforms, which stems from the program's failure t...

Out-of-bounds read vulnerability in ve*** data parsing in Foxit PDF Reader U3D plugin

Foxit PDF Reader is an e-book reader. Foxit PDF Reader U3D plug-in ve data parsing there is an out-of-bounds read vulnerability, an attacker can be constructed through the construction of a special PDF file to take advantage of the vulnerability in the current application context to execute code...

KLA11918 Security vulnerabilities in Foxit Reader

Security vulnerabilities was found in Foxit Reader. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories Foxit Security Bulletins Exploitation Related products Foxit-Reader CVE list CVE-2020-9596 critical CVE-2020-9592 critical Solution Update to the...

PT-2020-12409

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.7.1.29511 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...

Foxit Reader resetForm Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the resetForm method...

Foxit Reader XFA Template Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of XFA...

Foxit Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

Foxit Reader XFA Widget Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of widge...

PT-2020-5585

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 9.7.0.29478 Foxit Reader affected versions not specified Description The issue is related to errors in data type conversion in the implementation of the AddWatermark command in Foxit Reader and Foxit PhantomPDF. This c...

PT-2020-12410

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.7.1.29511 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...

PT-2020-5580

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 9.7.0.29478 Foxit Reader affected versions not specified Description The issue is related to errors in data type conversion in the implementation of the OCRAndExportToExcel command in Foxit Reader and Foxit PhantomPDF...

PT-2020-5590

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.7.1.29511 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...

PT-2020-5586

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 9.7.0.29478 Foxit Reader affected versions not specified Description The issue is related to errors in data type conversion in the implementation of the Export command in Foxit Reader and Foxit PhantomPDF. This can be...

PT-2020-5584

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 9.7.0.29478 Foxit Reader affected versions not specified Description The issue is related to errors in data type conversion in the implementation of the RotatePage command in Foxit Reader and Foxit PhantomPDF. This can...

PT-2020-5589

Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.7.1.29511 Foxit PhantomPDF affected versions not specified Description The issue is related to a use-after-free vulnerability in the resetForm method, which can be exploited by remote attackers to execute arbitrary code ...

SRC-2020-0015 : Foxit Reader Link Index Out-of-Bounds Read Information Disclosure Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exis...

Code Execution Vulnerability in Foxit Reader U3D Plug-in (CNVD-2020-26511)

Foxit Software Incorporated Foxit Software is a provider of product technology and solutions that cover the document lifecycle, including document generation, conversion, display, editing, searching, printing, storage, signing, forms, protection, and secure distribution management. A code executi...

Code Execution Vulnerability in Foxit Reader U3D Plug-in (CNVD-2020-26509)

Foxit Software Incorporated Foxit Software is a provider of product technology and solutions that cover the document lifecycle, including document generation, conversion, display, editing, searching, printing, storage, signing, forms, protection, and secure distribution management. A code executi...

Code Execution Vulnerability in Foxit Reader U3D Plug-in

Foxit Software Incorporated Foxit Software is a provider of product technology and solutions that cover the document lifecycle, including document generation, conversion, display, editing, searching, printing, storage, signing, forms, protection, and secure distribution management. A code executi...