Lucene search
+L

10400 matches found

Prion
Prion
added 2021/07/09 6:15 p.m.27 views

Design/Logic Flaw

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures because the certificate name, document owner, and signature author are mishandled...

4.3CVSS5.6AI score0.00771EPSS
SaveExploits0References1Affected Software2
ATTACKERKB
ATTACKERKB
added 2021/07/09 6:15 p.m.5 views

CVE-2021-33795

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures because the certificate name, document owner, and signature author are mishandled...

5.5CVSS6.1AI score0.00771EPSS
SaveExploits0References2
Prion
Prion
added 2021/07/09 6:15 p.m.26 views

Out-of-bounds

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary...

6.8CVSS7.6AI score0.02107EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2021/07/09 5:14 p.m.35 views

CVE-2021-33792

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary...

7.8AI score0.02107EPSS
SaveExploits0References1
CVE
CVE
added 2021/07/09 5:14 p.m.102 views

CVE-2021-33792

CVE-2021-33792 affects Foxit Reader prior to 10.1.4 and Foxit PhantomPDF prior to 10.1.4. The root cause is an out-of-bounds write triggered by a crafted /Size key in the Trailer dictionary. Public references consistently describe a buffer/space issue leading to memory corruption in these PDF pro...

7.8CVSS7.5AI score0.02107EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2021/07/09 5:13 p.m.32 views

CVE-2021-33795

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures because the certificate name, document owner, and signature author are mishandled...

5.8AI score0.00771EPSS
SaveExploits0References1
CVE
CVE
added 2021/07/09 5:13 p.m.91 views

CVE-2021-33795

CVE-2021-33795 affects Foxit Reader before 10.1.4 and Foxit PhantomPDF before 10.1.4. The root cause is mishandling of the certificate name, document owner, and signature author in PDF signatures, resulting in incorrect document signatures. Reported impact indicates partial integrity impact with ...

5.5CVSS5.6AI score0.00771EPSS
SaveExploits0References1Affected Software2
CNNVD
CNNVD
added 2021/07/09 12:00 a.m.10 views

Foxit Reader 和 Foxit PhantomPDF 缓冲区错误漏洞

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A buffer overflow vulnerability exists in Foxit Reader and Foxit PhantomPDF, no details of the vulnerability are available at this time...

7.8CVSS5.8AI score0.02107EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/07/09 12:00 a.m.13 views

Foxit Reader和Foxit PhantomPDF 安全漏洞

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and Foxit PhantomPDF, and no details of the vulnerability are available at this time...

5.5CVSS5.5AI score0.00771EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/16 11:15 p.m.7 views

CVE-2021-31476

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.5AI score0.06379EPSS
SaveExploits0References2
NVD
NVD
added 2021/06/16 11:15 p.m.35 views

CVE-2021-31476

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS0.06379EPSS
SaveExploits0References2
Prion
Prion
added 2021/06/16 11:15 p.m.24 views

Type confusion

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.8AI score0.06379EPSS
SaveExploits0References2Affected Software2
ATTACKERKB
ATTACKERKB
added 2021/06/16 11:15 p.m.8 views

CVE-2021-31476

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.3AI score0.06379EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/06/16 10:15 p.m.41 views

CVE-2021-31476

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS8.3AI score0.06379EPSS
SaveExploits0References2
CVE
CVE
added 2021/06/16 10:15 p.m.263 views

CVE-2021-31476

CVE-2021-31476 affects Foxit PhantomPDF 10.1.3.37598. The flaw is in the handling of XFA templates and stems from a lack of input validation, leading to a type confusion condition. This can allow remote attackers to execute arbitrary code in the context of the target process, with user interactio...

7.8CVSS8AI score0.06379EPSS
SaveExploits0References2Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2021/05/26 12:00 a.m.219 views

Foxit PhantomPDF XFA Template Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of X...

7.8CVSS2.4AI score0.06379EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/05/26 12:00 a.m.32 views

Foxit PhantomPDF 安全漏洞

Foxit PhantomPDF is a PDF document reader from the Chinese company Foxit. A security vulnerability exists in Foxit PhantomPDF that stems from a lack of proper validation of user-supplied data, which could allow a remote attacker to execute arbitrary code...

7.8CVSS7.8AI score0.06379EPSS
SaveExploits0References3
OSV
OSV
added 2021/05/21 3:15 p.m.7 views

CVE-2021-31473

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.2AI score0.05589EPSS
SaveExploits1References2
NVD
NVD
added 2021/05/21 3:15 p.m.44 views

CVE-2021-31473

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS0.05589EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/05/21 3:15 p.m.5 views

CVE-2021-31473

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.3AI score0.05589EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder