Lucene search
K

5374 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 7:57 a.m.2 views

CVE-2024-29072

A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the updater executable before executing it. A low privilege user can trigger the update action which can result in unexpected elevation of privilege...

8.2CVSS7AI score0.00464EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:8 a.m.7 views

CVE-2024-49576

A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBFWidget object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An...

8.8CVSS8.9AI score0.01142EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 1:0 a.m.9 views

CVE-2024-28888

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a checkbox field object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker...

8.8CVSS8.1AI score0.0193EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2025/01/22 12:0 a.m.4 views

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) lies in the incorrect handling of links before accessing the file. This allows attackers to exploit this flaw to gain increased privileges.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS6.7AI score0.00278EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/21 12:0 a.m.6 views

The vulnerability of the AcroForms component of the PDF e-mail viewing software, Foxit PDF Reader (formerly Foxit Reader), allows a hacker to execute arbitrary code.

The vulnerability of the AcroForms component in the PDF document viewing software Foxit PDF Reader formerly Foxit Reader is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00328EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/03 12:0 a.m.3 views

The vulnerability of the AcroForm component in the PDF Foxit Reader software (formerly Foxit Reader) allows a perpetrator to execute arbitrary code.

The vulnerability of the AcroForm component in the PDF viewer software from Foxit, known as Foxit PDF Reader formerly Foxit Reader, relates to reading data beyond the allowed range in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, provided that the user...

7.8CVSS7.5AI score0.00392EPSS
Exploits0References5Affected Software1
NCSC
NCSC
added 2024/12/31 9:22 a.m.4 views

Vulnerabilities fixed in Foxit PDF Reader and PDF Editor

Foxit has fixed vulnerabilities in Foxit PDF Reader. The vulnerabilities include a remote code execution vulnerability due to improper validation of user-supplied data in AcroForms, a memory corruption related to AcroForm functionality, and a local privilege escalation vulnerability that can be...

8.8CVSS8.7AI score0.0127EPSS
Exploits2References1
CNNVD
CNNVD
added 2024/12/30 12:0 a.m.3 views

Foxit PDF Reader 后置链接漏洞

Foxit PDF Reader is a PDF document reader. A security vulnerability exists in the Foxit PDF Reader installer, which can be exploited by a local attacker to construct a special request that can execute arbitrary code with SYSTEM privileges...

7.3CVSS7.3AI score0.00278EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/12/30 12:0 a.m.3 views

Foxit PDF Reader 缓冲区错误漏洞

Foxit PDF Reader is China Foxit Foxit company a PDF reader. A buffer overflow vulnerability exists in Foxit PDF Reader version 2024.2.3.25184, which stems from a lack of proper validation of user-supplied data, resulting in the reading of data beyond the end of the allocated buffer, and can be...

7.8CVSS7.6AI score0.00392EPSS
Exploits0References2
CNVD
CNVD
added 2024/12/25 12:0 a.m.2 views

Foxit Reader 3D Page Object Memory Misreference Vulnerability

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A memory misreference vulnerability exists in Foxit Reader version 2024.3.0.26795, which arises from a messed up instruction in a 3D page object responsible for freeing memory. An attacker could use this vulnerability to cause...

8.8CVSS7.3AI score0.0127EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2024/12/25 12:0 a.m.6 views

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.00914EPSS
Exploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/12/25 12:0 a.m.5 views

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to a memory corruption issue after object handling. Exploiting this vulnerability can allow an attacker to execute...

7.8CVSS7.7AI score0.00914EPSS
Exploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/12/25 12:0 a.m.4 views

The vulnerability of the AcroForm Handler component in the PDF Foxit Reader (formerly Foxit Reader) and Foxit PDF Editor (formerly Foxit PhantomPDF) software for viewing electronic documents affects the memory management after it is released. This allows an attacker to execute arbitrary code.

The vulnerability of the AcroForm Handler component in the PDF Foxit Reader formerly Foxit Reader and Foxit PDF Editor formerly Foxit PhantomPDF software for viewing electronic documents is related to the use of memory after it is released during object processing. Exploiting this vulnerability...

7.8CVSS7.6AI score0.00914EPSS
Exploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/12/25 12:0 a.m.7 views

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) is related to a bug in pointer handling after memory release, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to a bug in the handling of pointers after memory release during the processing of AcroForm objects. Exploiting this...

7.8CVSS7.6AI score0.00914EPSS
Exploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/12/25 12:0 a.m.4 views

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.00895EPSS
Exploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/12/25 12:0 a.m.4 views

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.00914EPSS
Exploits0References5Affected Software2
CNVD
CNVD
added 2024/12/20 12:0 a.m.10 views

Foxit Reader memory corruption vulnerability (CNVD-2025-0095609)

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A security vulnerability exists in Foxit Reader version 2024.3.0.26795, which originates from a post-release reuse vulnerability contained in the checkbox CBFWidget object. An attacker can exploit this vulnerability to cause...

8.8CVSS7.4AI score0.01142EPSS
Exploits1References1
Talos Blog
Talos Blog
added 2024/12/19 6:53 p.m.33 views

Acrobat out-of-bounds and Foxit use-after-free PDF reader vulnerabilities found

Cisco Talos' Vulnerability Research team recently disclosed three out-of-bounds read vulnerabilities in Adobe Acrobat Reader, and two use-after-free vulnerabilities in Foxit Reader. These vulnerabilities exist in Adobe Acrobat Reader and Foxit Reader, two of the most popular and feature-rich PDF...

8.8CVSS7.4AI score0.0127EPSS
Exploits2
OpenVAS
OpenVAS
added 2024/12/19 12:0 a.m.29 views

Foxit Reader Multiple Vulnerabilities (Dec-1 2024) - Windows

Foxit Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:foxitsoftware:reader";...

8.8CVSS7.6AI score0.0127EPSS
Exploits2References1
OSV
OSV
added 2024/12/18 4:15 p.m.2 views

CVE-2024-49576

A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBFWidget object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An...

8.8CVSS6AI score0.01142EPSS
Exploits1References2
Rows per page
Query Builder