Foxit Reader and Foxit PhantomPDF Arbitrary Code Execution Vulnerability (CNVD-2016-00994)

Foxit Reader is a PDF document reader.Foxit PhantomPDF is a commercial version. Foxit Reader and Foxit PhantomPDF contain a security vulnerability that can be exploited by remote attackers to construct malicious files that can be parsed by the user, crashing the application or executing arbitrary...

The vulnerabilities of the PDF editing program Foxit PhantomPDF and the PDF viewing program Foxit Reader allow a perpetrator to execute arbitrary code.

Multiple vulnerabilities exist in the Print method and the PDF editing application program Foxit PhantomPDF, as well as the PDF viewing program Foxit Reader. These vulnerabilities are related to the use of memory after it is freed. Exploiting these vulnerabilities could allow an attacker, operati...

Foxit Reader JBIG2 Out-of-Bounds Read Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. A security vulnerability exists in Foxit Reader's JBIG2 parsing, which arises during the JBIG2 parsing process, where a PDF file embedded with a special JBIG2 image can force Foxit Reader to read outside of allocated memory, and ca...

Foxit Reader ConvertToPDF Heap Buffer Overflow Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. A security vulnerability exists in Foxit Reader's ConvertToPDFx86.dll that can be exploited to allow an attacker to interact with a victim via a malicious web page or a malicious file to execute arbitrary commands in the current...

Foxit Reader ConvertToPDF heap buffer overflow remote code execution vulnerability-vulnerability warning-the black bar safety net

Affected systems: Foxit Foxit Reader Description: Foxit Reader is a small PDF document viewer and print program. Foxit Reader ConvertToPDFx86. dll in the presence of security vulnerabilities. Structure of the BMP graphics will result in a heap buffer overflow. An attacker could exploit this...

Foxit Reader 7.2.8.1124 - .PDF Parsing Memory Corruption

Foxit Reader 7.2.8.1124 - .PDF Parsing Memory Corruption Application: Foxit Reader PDF Parsing Memory Corruption Platforms: Windows Versions: 7.2.8.1124 and earlier Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG 1 Introduction 2 Report Timeline 3...

Foxit Reader 7.2.8.1124 - PDF Parsing Memory Corruption

Exploit for windows platform in category dos / poc Application: Foxit Reader PDF Parsing Memory Corruption Platforms: Windows Versions: 7.2.8.1124 and earlier Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technica...

Foxit Reader 7.2.8.1124 - '.PDF' Parsing Memory Corruption

Application: Foxit Reader PDF Parsing Memory Corruption Platforms: Windows Versions: 7.2.8.1124 and earlier Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction...

Foxit Reader ConvertToPDF Heap Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within ConvertToPDFx86.dll...

Foxit Reader XFA FormCalc replace Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...

Foxit Reader Global setPersistent Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit Reader Font Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within font parsing. A...

Foxit Reader JBIG2 Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within JBIG2 parsing. A...

Foxit Reader GpRuntime::GpLock::GpLock Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Foxit uses...

Foxit Reader Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of PDF...

Foxit FoxitCloudUpdateService Local Elevation of Privilege Vulnerability

Foxit Reader is a small PDF document viewer and printing program. A security vulnerability exists in the FoxitCloudUpdateService of Foxit Reader. A remote attacker writing certain data in a shared memory area can trigger a memory corruption, leading to the execution of arbitrary code in the syste...

Foxit Reader FlateDecode Heap Buffer Overflow Vulnerability

Foxit Reader is a small PDF document viewer and printing program. A security vulnerability exists in Foxit Reader's FlateDecode. A remote attacker can exploit this vulnerability to execute application code in the current process of the affected application...

Foxit Reader Arbitrary Code Execution Vulnerability

Foxit Reader is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Foxit Reader/PhantomPDF Memory Misreference Vulnerability

Foxit PhantomPDF is a practical PDF solution. A memory misreference vulnerability exists in Print object and App object handling in Foxit Reader before 7.2.2 and Foxit PhantomPDF before 7.2.2. A remote attacker can execute arbitrary code using a constructed PDF document...

CVE-2015-8580

Multiple use-after-free vulnerabilities in the 1 Print method and 2 App object handling in Foxit Reader before 7.2.2 and Foxit PhantomPDF before 7.2.2 allow remote attackers to execute arbitrary code via a crafted PDF document...