Foxit Reader and Foxit PhantomPDF Denial of Service Vulnerability (CNVD-2016-01903)

Foxit Reader is a PDF document reader.Foxit PhantomPDF is a commercial version. A denial of service vulnerability can be triggered when using Foxit Reader or Foxit PhantomPDF to open a carefully constructed PDF file. An attacker can exploit this vulnerability to cause a denial of service...

Foxit Reader FlateDecode Memory Error References Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. A security vulnerability exists in Foxit Reader FlateDecode. The vulnerability allows an attacker to execute arbitrary code by accessing a malicious web page...

Foxit Reader XFA preOpen Memory Error Referencing Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of the preOpen event, which could allow the reuse of a pointer that has already been released in the hanging pointer. An attacker could execute arbitrary code in the current...

Foxit Reader ConvertToPDF JPEG Out-of-Bounds Read Information Disclosure Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the ConvertToPDF plug-in, due to a constructed JPEG graphic that triggers a read of memory outside of the allocated object. An attacker could be allowed to exploit the vulnerability to...

Foxit Reader XFA Re-merge After Release Re-exploit Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of XFA forms, which could allow the reuse of a pointer that has been released in the hanging pointer. An attacker can execute arbitrary code in the current process context...

Foxit Reader Format Operation Memory Error References Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in field handling that could allow the reuse of a pointer that has been released in a hanging pointer. An attacker could execute arbitrary code in the current process context...

Foxit Reader Revision Number Memory Error References Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of object revision numbers, which could allow the reuse of pointers that have already been released in the hanging pointer. An attacker could execute arbitrary code in the...

Foxit Reader ConvertToPDF JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the ConvertToPDF...

Foxit Reader XFA preOpen Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

Foxit Reader XFA Page prePrint Event Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

Foxit Reader Revision Number Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the object's revisi...

Foxit Reader Fields Format Action Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the handling of fields. A...

Foxit Reader ConvertToPDF GIF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the ConvertToPDF...

Foxit Reader FlateDecode Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within FlateDecode. A...

Foxit Reader XFA remerge Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...

Foxit Reader Revision Number Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of an...

Foxit Reader Global setPersistent Memory Error References Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. A security vulnerability exists in the global.setPersistent method of Foxit Reader. global.setPersistent forces a hanging pointer to be released and then reused when saving a global variable. An attacker can exploit this...

Foxit Reader GpRuntime::GpLock::GpLock Memory Misreference Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. A security vulnerability exists in the way Foxit Reader uses the Gdiplus API, constructing PDFs that force the use of suspended pointers that have been released in GpRuntime::GpLock::GpLock. An attacker could exploit this...

Foxit Reader XFA FormCalc replace Integer Overflow Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of XFA FormCalc. The constructed replace call triggers an integer overflow. An attacker can exploit this vulnerability to execute arbitrary code in the current process conte...

Foxit Reader and Foxit PhantomPDF integer overflow vulnerability (CNVD-2016-00916)

Foxit Reader is a PDF document reader.Foxit PhantomPDF is a commercial version. Foxit Reader and Foxit PhantomPDF have an integer overflow vulnerability that can be exploited by attackers to execute arbitrary code or cause a denial of service...