Lucene search
+L

5419 matches found

Prion
Prion
added 2019/03/21 4:1 p.m.17 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of P...

6.8CVSS8.8AI score0.03719EPSS
SaveExploits0References2Affected Software2
Prion
Prion
added 2019/03/21 4:1 p.m.24 views

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

4.3CVSS6.2AI score0.0429EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2019/03/19 7:56 p.m.59 views

CVE-2019-6728

The CVE-2019-6728 issue affects Foxit Reader (PDF processing path) and is due to an out-of-bounds read caused by inadequate validation of user-supplied data, resulting in a read past the end of an allocated buffer. This vulnerability can disclose sensitive information and, in conjunction with oth...

6.5CVSS6.4AI score0.04647EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2019/03/19 7:56 p.m.58 views

CVE-2019-6730

CVE-2019-6730 affects Foxit Reader (and PhantomPDF in some records) via the popUpMenu method. The root cause is failure to validate the existence of an object before performing operations, leading to a use-after-free/memory misreference . This allows remote attackers to execute arbitrary code in ...

8.8CVSS8.8AI score0.0415EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2019/03/19 7:56 p.m.36 views

CVE-2019-6735

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.2AI score0.0429EPSS
SaveExploits0References2
CVE
CVE
added 2019/03/19 7:56 p.m.55 views

CVE-2019-6735

CVE-2019-6735 affects Foxit Reader. A vulnerability in PDF file processing causes an out-of-bounds read due to lack of proper validation of user-supplied data, potentially disclosing sensitive information. Exploitation requires user interaction (visiting a malicious page or opening a malicious fi...

6.5CVSS6.2AI score0.0429EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2019/03/19 7:56 p.m.60 views

CVE-2019-6729

CVE-2019-6729 is a remote-code-execution vulnerability in Foxit Reader and Foxit PhantomPDF for Windows caused by an out-of-bounds read during PDF processing due to improper validation of input data (read past end of allocated buffer). It requires user interaction (malicious page or file). Affect...

8.8CVSS8.8AI score0.03719EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2019/03/19 7:56 p.m.26 views

CVE-2019-6730

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the popUpMenu metho...

8.8AI score0.0415EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2019/03/19 7:56 p.m.27 views

CVE-2019-6729

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of P...

8.8AI score0.03719EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2019/03/19 7:56 p.m.36 views

CVE-2019-6728

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.2AI score0.04647EPSS
SaveExploits0References2
CVE
CVE
added 2019/03/19 7:56 p.m.58 views

CVE-2019-6727

CVE-2019-6727 involves Foxit Reader (XFA remerge method) where a failure to validate the existence of an object before operating on it enables remote code execution after user visits a malicious page or opens a malicious file. The issue is characterized as a use-after-free/invalid object handling...

8.8CVSS8.8AI score0.0415EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2019/03/19 7:56 p.m.37 views

CVE-2019-6727

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XFA remerge...

8.8AI score0.0415EPSS
SaveExploits0References2
OSV
OSV
added 2019/01/30 10:29 p.m.5 views

CVE-2018-3956

An exploitable out-of-bounds read vulnerability exists in the handling of certain XFA element attributes of Foxit Software's PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger an out-of-bounds read, which can disclose sensitive memory content and aid in exploitation when...

7.1CVSS5.6AI score0.49566EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/01/30 12:0 a.m.6 views

Foxit 3D Plugin Beta Integer Overflow Vulnerability

Foxit Reader is a Chinese Foxit Foxit software company of a PDF document reader.Foxit PhantomPDF is a commercial version.Foxit 3D Plugin Beta is one of the 3D plugin. An integer overflow vulnerability exists in versions prior to Foxit 3D Plugin Beta 9.4.0.16807 for Foxit Reader and PhantomPDF. An...

6.5CVSS6.8AI score0.01117EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/01/30 12:0 a.m.7 views

Unspecified Vulnerability in Foxit 3D Plugin Beta

Foxit Reader is a Chinese Foxit Foxit software company of a PDF document reader.Foxit PhantomPDF is a commercial version.Foxit 3D Plugin Beta is one of the 3D plugin. A security vulnerability exists in versions prior to Foxit 3D Plugin Beta 9.4.0.16807 for Foxit Reader and PhantomPDF. No details ...

6.5CVSS6.7AI score0.01117EPSS
SaveExploits0References1
Prion
Prion
added 2019/01/28 9:29 a.m.15 views

Design/Logic Flaw

An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter an Out-of-Bounds Write and crash during the handling of certain PDF files that embed specifically crafted 3D content, because of the improper handling of a logic...

4.3CVSS5.5AI score0.02512EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/01/28 9:0 a.m.46 views

CVE-2019-6984

Foxit 3D Plugin Beta (before 9.4.0.16807) for Foxit Reader/PhantomPDF is affected. The issue can trigger Use-After-Free or Type Confusion and crash when parsing certain PDFs that embed crafted 3D content, caused by a wild pointer. Affected component is the Foxit 3D Plugin Beta prior to version 9....

6.5CVSS6.4AI score0.01117EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2019/01/25 12:0 a.m.5 views

PT-2019-18287 · Foxit · Foxit Reader

Name of the Vulnerable Software and Affected Versions: Foxit Reader affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious...

8.8CVSS8.7AI score0.0415EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2019/01/25 12:0 a.m.28 views

Foxit Reader XFA remerge Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XFA remerge...

7.8CVSS2.6AI score0.0415EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/25 12:0 a.m.26 views

Foxit Reader ConvertToPDF TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within ConvertToPDFx86.dll...

7.8CVSS4.3AI score0.01269EPSS
SaveExploits0References1
Rows per page
Query Builder