CVE-2019-5131

Foxit PDF Reader (Foxit Reader) is affected by a use-after-free vulnerability in the JavaScript engine for version 9.7.0.29435 (and possibly earlier per advisories). A specially crafted PDF can trigger reuse of a previously freed object, enabling arbitrary code execution. Exploitation requires th...

Vulnerability Spotlight: Multiple remote code execution vulnerabilities in Foxit PDF Reader

Aleksandar Nikolic of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered four remote code execution vulnerabilities in Foxit PDF Reader. Foxit PDF Reader is a popular program for reading and editing PDFs. The software supports JavaScript to allow fo...

Foxit PDF Reader JavaScript field keystroke action remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user t...

Foxit PDF Reader JavaScript field action OnBlur remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to...

Foxit PDF Reader Javascript Field Action Validate Remote Code Execution Vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to...

Foxit PDF Reader Javascript createTemplate Invalid Page Code Execution Vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to...

KLA11648 Multiple vulnerabilities in Foxit PDF Reader

A multiple use-after-free vulnerabilities in the JavaScript engine can be exploited by a specially crafted PDF document to execute arbitrary code. Original advisories Foxit Security Bulletins Related products Foxit-Reader Foxit-Phantom-PDF Foxit-Reader-Enterprise CVE list CVE-2019-5130 high...

Foxit Reader Installed (Linux)

Binary data foxitreadernixinstalled.nbin...

Foxit 3D Plugin Beta 9.7.0.29430 NULL Pointer Dereference Vulnerability

The version of the Foxit 3D plugin installed on the remote Windows host is prior to 9.7.0.29430. It is, therefore affected by a NULL pointer dereference flaw due to improper validation of image data when parsing certain files with incorrect image information. An unauthenticated, remote attacker c...

Foxit 3D Plugin (U3DBrowser) Installed (Windows)

Binary data foxitu3dbrowserpluginwininstalled.nbin...

Foxit Reader PhantomPDF Use After Free Code Execution (CVE-2019-6730)

A use after free vulnerability exists in Foxit Reader. This vulnerability is due to improper handling of freed objects in the JavaScript popUpMenu method. Successful exploitation could allow the attacker to execute arbitrary code in the context of the application...

Foxit Studio Photo < 3.6.6.913 Multiple Vulnerabilities

According to its self-reported version, the Foxit Studio Photo application installed on the remote Windows host is affected by multiple vulnerabilities: - An out-of-bounds read error exist in the TIF file handler when processing InkNames of TIFFSetField due to improper validation of user-supplied...

Foxit Studio Photo < 3.6.6.916 Out-of-Bounds Read Vulnerability

According to its self-reported version, the Foxit Studio Photo application installed on the remote Windows host is affected by an out-of-bounds read error in the preview creation of EPS files due to improper validation of user-supplied data. An unauthenticated, remote attacker can exploit this, t...

Foxit PDF pc Client Software DLL Hijacking Vulnerability

Foxit PDF provides the same PDF rendering engine as Foxit Reader and Foxit Fengyuan PDF electronic document processing suite, using the same underlying technology as Google Chrome's embedded PDF reader, which provides a fast and clear reading experience for a wide range of users. Foxit PDF pc...

Foxit Studio Photo Installed (Windows)

Binary data foxitstudiophotowininstalled.nbin...

Foxit PhantomPDF < 9.7 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 9.7. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's...

Foxit Reader Denial of Service Vulnerability (CNVD-2019-41608)

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A security vulnerability exists in Foxit Reader versions prior to 9.7. An attacker could exploit this vulnerability to cause a denial of service...

Foxit Reader < 9.5 Multiple Vulnerabilities

According to its version, the Foxit Reader application installed on the remote Windows host is prior to 9.5. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenab...

Foxit PhantomPDF < 9.5 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 9.5. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's...

Foxit PhantomPDF 8.x < 8.3.12 / 9.x < 9.7 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 8.x 8.3.12 / 9.x 9.7. It is, therefore affected by multiple vulnerabilities: - An out-of-bounds error exists in the V8 JavaScript engine. An unauthenticated, remot...