Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 2019.010.20098. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 2019.010.20098. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2019-6761

Foxit Reader 9.4.0.16811 is affected by a vulnerability in the XFA CXFA_FFDocView object where the code fails to validate the existence of an object before performing operations, enabling arbitrary code execution. Exploitation requires user interaction (visitor to a malicious page/file). The issu...

CVE-2019-6771

CVE-2019-6771 affects Foxit Reader 2019.010.20098. The issue is in the handling of the value property of a Field object within AcroForms, caused by not validating the existence of an object before performing operations. This can be exploited to disclose sensitive information and, when combined wi...

CVE-2019-6766

CVE-2019-6766 affects Foxit Reader 9.4.1.16828. The flaw is in removeField for AcroForms, caused by not validating the existence of the target object before operations. This enables remote information disclosure; exploitation requires user interaction (visiting a malicious page or opening a malic...

CVE-2019-6764

Foxit Reader 9.4.1.16828 is affected by CVE-2019-6764 due to improper validation in the processing of XFA Template objects, causing a write past the end of an allocated structure. This enables remote code execution and requires user interaction (victim must visit a malicious page or open a malici...

CVE-2019-6767

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2019-6757

CVE-2019-6757 affects Foxit Reader 9.4.16811. The flaw is in ConvertToPDF_x86.dll and stems from not validating the existence of an object before performing operations, enabling remote code execution after user interaction (visit a malicious page or open a malicious file). The current process con...

CVE-2019-6772

Foxit Reader (version 2019.010.20098) is affected by CVE-2019-6772 via the removeField method in AcroForms, where the code fails to validate object existence before operations. This can lead to information disclosure and, when combined with other vulnerabilities, potential code execution in the p...

CVE-2019-6761

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.0.16811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XFA...

CVE-2019-6764

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2019-6773

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2019-6760

Foxit Reader 9.4.16811 is affected by CVE-2019-6760 due to an out-of-bounds write in ConvertToPDF_x86.dll caused by insufficient validation of user-supplied data. This allows remote attackers to execute arbitrary code, with user interaction required (the target must visit a malicious page or open...

CVE-2019-6766

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2019-6759

CVE-2019-6759 affects Foxit Reader (Windows) with the flaw located in the ConvertToPDF_x86.dll. The issue stems from insufficient validation of user-supplied data, allowing a write past the end of an allocated object in ConvertToPDF_x86.dll and enabling arbitrary code execution in the context of ...

CVE-2019-6763

Foxit CVE-2019-6763 affects Foxit Reader 9.4.1.16828 via the Foxit.FoxitReader.Ctl ActiveX object’s ToggleFormsDesign method. The root cause is failure to validate the existence of an object before performing operations, enabling remote code execution when a user visits a malicious page or opens ...

CVE-2019-6769

CVE-2019-6769 affects Foxit Reader 9.4.1.16828 and earlier. The flaw is in the removeField method when processing AcroForms, caused by not validating the existence of an object before operating on it, enabling arbitrary code execution in the attacker’s context after user interaction (visit a mali...

CVE-2019-6773

Summary: CVE-2019-6773 affects Foxit Reader 9.4.1.16828. The vulnerability arises from improper handling of the richValue property of a Field object within AcroForms, due to a missing validation of the object before performing operations. This leads to information disclosure via crafted pages/fil...

CVE-2019-6770

Foxit Reader 9.4.1.16828 is affected by a vulnerability in the resetForm method for AcroForms that discloses information due to not validating an object’s existence before operations. Exploitation requires user interaction (visiting a malicious page or opening a malicious file) and, per the docum...