CVE-2016-8878: Out-of-bounds Read

Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to execute arbitrary code via a crafted BMP image embedded in the XFA stream in a PDF document, aka "Data from Faulting Address may be used as a return...

CVE-2016-8856: Undefined Security Weakness

Foxit Reader for Mac 2.1.0.0804 and earlier and Foxit Reader for Linux 2.1.0.0805 and earlier suffered from a vulnerability where weak file permissions could be exploited by attackers to execute arbitrary code. After the installation, Foxit Reader's core files were world-writable by default,...

CVE-2016-8876: Out-of-bounds Read

Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to execute arbitrary code via a crafted TIFF image embedded in the XFA stream in a PDF document, aka "Read Access Violation starting at FoxitReader."...

PT-2016-7603

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 8.1 PhantomPDF versions prior to 8.1 Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and application crash, via a crafted TIFF image. This occurs whe...

PT-2016-7597

Name of the Vulnerable Software and Affected Versions Foxit Reader for Mac versions 2.1.0.0804 and earlier Foxit Reader for Linux versions 2.1.0.0805 and earlier Description The issue is related to weak file permissions that could be exploited by attackers to execute arbitrary code. After...

PT-2016-7607

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 8.1 Foxit PhantomPDF versions prior to 8.1 Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds write and application crash, via a crafted JPEG2000 image...

PT-2016-7604

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 8.1 Description The issue is related to an Out-of-Bounds read vulnerability. It allows remote attackers to execute arbitrary code via a crafted TIFF image embedded in the XFA stream in a PDF docume...

PT-2016-7605

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 8.1 Description A heap buffer overflow issue, also referred to as an "out-of-bounds write" or "corrupted suffix pattern," exists in the handling of crafted JPEG2000 images embedded in PDF documents...

Foxit Reader Boundary Read Local Information Disclosure Vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation produced a small PDF document viewing and printing programs. Foxit Reader suffers from a Boundary Read Local Information Disclosure vulnerability, which can be exploited by local attackers to obtain sensitive information and launch further...

Multiple Vulnerabilities in Foxit Reader and PhantomPDF

Foxit Reader is a PDF document reader from China's Foxit Software Corporation.Foxit PhantomPDF is a commercial version. Multiple versions of Foxit Reader and PhantomPDF have heap overflow, denial of service, integer overflow, and remote code execution vulnerabilities that can be exploited by an...

KLA10891 Multiple vulnerabilities in Foxit Reader

Multiple serious vulnerabilities have been found in Foxit Reader. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Heap corruption at thumbnail shell extension plugi...

Foxit Reader GoToR Action Stack Buffer Overflow

A stack buffer overflow vulnerability has been reported in Foxit Reader. The vulnerability is due improper handling of the GoToR action. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted pdf file. Successful exploitation could allow...

SRC-2016-0041 : Foxit Reader FlateDecode Use-After-Free Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Foxit Reader < 8.0.2 Multiple Vulnerabilities

Binary data 9491.prm...

Foxit Reader and Foxit PhantomPDF Out-of-Bounds Reading Information Disclosure Vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation produced a small PDF document viewing and printing program, PhantomPDF is a commercial version. Foxit Reader and Foxit PhantomPDF have an out-of-bounds read information disclosure vulnerability that could be exploited by attackers to obtain...

Foxit Reader and Foxit PhantomPDF Out-of-Bounds Read/Write Remote Command Execution Vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation produced a small PDF document viewing and printing program, PhantomPDF is a commercial version. Foxit Reader and Foxit PhantomPDF have an out-of-bounds read/write remote command execution vulnerability that could be exploited by an attacker...

Multiple Remote Command Execution Vulnerabilities in Foxit Reader and Foxit PhantomPDF

Foxit Reader is China's Foxit Foxit Software Corporation produced a small PDF document viewing and printing program, PhantomPDF is a commercial version. Multiple remote command execution vulnerabilities exist in Foxit Reader and Foxit PhantomPDF, which could be exploited by an attacker to execute...

Foxit Reader and PhantomPDF DLL Load Remote Command Execution Vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation produced a small PDF document viewing and printing program, PhantomPDF is a commercial version. A remote command execution vulnerability exists in the loading of the Foxit Reader and PhantomPDF DLLs, which could be exploited by an attacker ...

Multiple Denial of Service Vulnerabilities in Foxit Reader and Foxit PhantomPDF

Foxit Reader is China's Foxit Foxit Software Corporation produced a small PDF document viewing and printing program, PhantomPDF is a commercial version. Multiple denial of service vulnerabilities exist in Foxit Reader and Foxit PhantomPDF, which could be exploited by attackers to cause the...

Foxit Reader and PhantomPDF Remote Command Execution Vulnerability (CNVD-2016-07030)

Foxit Reader is China's Foxit Foxit Software Corporation produced a small PDF document viewing and printing program, PhantomPDF is a commercial version. A remote command execution vulnerability exists in Foxit Reader and Foxit PhantomPDF, which could be exploited by an attacker to execute arbitra...