Lucene search
+L

10400 matches found

CNNVD
CNNVD
added 2021/05/07 12:00 a.m.12 views

Foxit Reader 缓冲区错误漏洞

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A security vulnerability exists in the parsing of U3D files in Foxit Reader. The vulnerability stems from the lack of proper validation of user-supplied data. The vulnerability can be exploited to execute code in the context o...

7.8CVSS5.7AI score0.02812EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2021/05/07 12:00 a.m.38 views

Foxit Reader XFA leadDigits Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7.8CVSS3.4AI score0.02511EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/05/07 12:00 a.m.40 views

Foxit Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

3.3CVSS2AI score0.02682EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/05/07 12:00 a.m.42 views

Foxit Reader XFA Form Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...

7.8CVSS1.9AI score0.02933EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/05/07 12:00 a.m.243 views

Foxit Reader app.media Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the the handling of...

7.8CVSS2.5AI score0.04287EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/05/07 12:00 a.m.16 views

Foxit Reader 资源管理错误漏洞

Foxit Reader old name: Foxit PDF Reader is a set of software used to read PDF format files, by Fujian Foxit Software developed by Foxit Reader is a set of free to use the software, the operating system is mainly based on Microsoft Windows, and as long as there is a Win32 implementation of the...

7.8CVSS6.3AI score0.02778EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/05/07 12:00 a.m.11 views

Foxit Reader 资源管理错误漏洞

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A reuse-after-release remote code execution vulnerability exists in Foxit Reader Annotation. The vulnerability stems from not verifying the existence of an object before performing an operation on it. An attacker can exploit...

7.8CVSS6.5AI score0.02755EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/05/07 12:00 a.m.12 views

Foxit Reader 缓冲区错误漏洞

Foxit Reader is a PDF document reader from the Chinese company Foxit. Foxit Reader 10.1.1.37576 suffers from a buffer error vulnerability that stems from a lack of proper validation of user-supplied data, resulting in reading more than the end of an allocated object. An attacker can exploit this...

4.3CVSS5.4AI score0.02682EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/05/07 12:00 a.m.12 views

Foxit Reader 安全漏洞

Foxit Reader old name: Foxit PDF Reader is a set of software used to read PDF format files, by Fujian Foxit Software developed by Foxit Reader is a set of free to use the software, the operating system is mainly based on Microsoft Windows, and as long as there is a Win32 implementation of the...

7.8CVSS6.9AI score0.02511EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/05/07 12:00 a.m.14 views

Foxit Reader 安全漏洞

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A security vulnerability exists in Foxit Reader app.media. The vulnerability stems from a lack of proper validation of user-supplied data. An attacker can exploit this vulnerability by tricking a user into visiting a malicious...

7.8CVSS5.8AI score0.04287EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2021/05/07 12:00 a.m.45 views

Foxit Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D...

7.8CVSS3.9AI score0.02819EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/05/07 12:00 a.m.8 views

Foxit Reader 缓冲区错误漏洞

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A security vulnerability exists in Foxit Reader U3D file parsing, which stems from the lack of proper validation of user-supplied data, which could lead to reading more than the end of an allocated object. An attacker can...

4.3CVSS6.1AI score0.02018EPSS
SaveExploits0References3
Talos Blog
Talos Blog
added 2021/05/06 8:12 a.m.20 views

Vulnerability Spotlight: Use-after-free vulnerability in Foxit PDF Reader

Aleksandar Nikolic of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Cisco Talos recently discovered a use-after-free vulnerability in the Foxit PDF Reader. Foxit PDF Reader is one of the most popular PDF document readers currently available. As a complete... This is only the...

2AI score
SaveExploits0
Kaspersky
Kaspersky
added 2021/05/06 12:00 a.m.72 views

KLA12166 Multiple vulnerabilities in Foxit Reader

Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A use after free vulnerability can be exploited remotely via...

8.8CVSS9.5AI score0.05589EPSS
SaveExploits2References4
CNNVD
CNNVD
added 2021/05/06 12:00 a.m.17 views

Foxit Reader for Windows 资源管理错误漏洞

Foxit Reader for Windows is a Windows-based PDF document reader from the Chinese company Foxit. Foxit Reader for Windows suffers from a resource management error vulnerability that originates from an error when handling certain XFA forms or annotation objects. A remote attacker could exploit the...

8.8CVSS7.9AI score0.01765EPSS
SaveExploits1References3
Talos
Talos
added 2021/05/06 12:00 a.m.200 views

Foxit Reader FileAttachment annotation use-after-free vulnerability

Summary A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A specially crafted PDF document can trigger the reuse of previously free memory, which can lead to arbitrary code execution. An attacker needs to trick the user into openi...

8.8CVSS8.9AI score0.01765EPSS
SaveExploits1
Kaspersky
Kaspersky
added 2021/05/06 12:00 a.m.74 views

KLA12191 Buffer overflow vulnerability in Foxit Reader

A buffer overflow vulnerability was found in Foxit Reader. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories Foxit Security Bulletins Related products Foxit-Reader CVE list CVE-2021-31476 critical Solution Update to the latest...

7.8CVSS8.5AI score0.06379EPSS
SaveExploits0References3
OSV
OSV
added 2021/04/29 5:15 p.m.12 views

CVE-2021-31438

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.2AI score0.02761EPSS
SaveExploits0References2
OSV
OSV
added 2021/04/29 5:15 p.m.10 views

CVE-2021-31434

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.1AI score0.02761EPSS
SaveExploits0References2
NVD
NVD
added 2021/04/29 5:15 p.m.22 views

CVE-2021-31434

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS0.02761EPSS
SaveExploits0References2
Rows per page
Query Builder