Lucene search
+L

10403 matches found

Talos
Talos
added 2018/10/01 12:00 a.m.314 views

Foxit PDF Reader JavaScript this.info multiple remote code execution vulnerabilities

Summary A total of six separate use-after-free vulnerabilities exist in the JavaScript engine of Foxit Software’s Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker...

8CVSS8.1AI score0.02895EPSS
SaveExploits0
Talos
Talos
added 2018/10/01 12:00 a.m.295 views

Foxit PDF Reader JavaScript JSON.Stringify this remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick...

8.8CVSS8.4AI score0.02577EPSS
SaveExploits0
Talos
Talos
added 2018/10/01 12:00 a.m.492 views

Foxit PDF Reader JavaScript field object isDefaultChecked remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick...

8.8CVSS8.4AI score0.03155EPSS
SaveExploits1
Talos
Talos
added 2018/10/01 12:00 a.m.522 views

Foxit PDF Reader Javascript importDataObject Remote Code Execution Vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to...

8.8CVSS8.5AI score0.03155EPSS
SaveExploits1
Talos
Talos
added 2018/10/01 12:00 a.m.544 views

Foxit PDF Reader JavaScript getPageNumWords remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to...

8CVSS8.1AI score0.09482EPSS
SaveExploits1
Talos
Talos
added 2018/10/01 12:00 a.m.509 views

Foxit PDF Reader JavaScript getPageRotation remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick...

8.8CVSS8.4AI score0.03155EPSS
SaveExploits1
Talos
Talos
added 2018/10/01 12:00 a.m.508 views

Foxit PDF Reader JavaScript this.event.target Remote Code Execution Vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to...

8CVSS8.2AI score0.06219EPSS
SaveExploits1
Talos
Talos
added 2018/10/01 12:00 a.m.291 views

Foxit PDF Reader JavaScript this.dataObjects remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to...

8CVSS8.2AI score0.06219EPSS
SaveExploits1
Talos
Talos
added 2018/10/01 12:00 a.m.507 views

Foxit PDF Reader JavaScript Field object signatureInfo remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick...

8.8CVSS8.4AI score0.02577EPSS
SaveExploits0
Talos
Talos
added 2018/10/01 12:00 a.m.524 views

Foxit PDF Reader JavaScript getPageNthWord remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick t...

8.8CVSS8.5AI score0.03155EPSS
SaveExploits1
Talos
Talos
added 2018/10/01 12:00 a.m.297 views

Foxit PDF Reader JavaScript field object signatureGetSeedValue remote code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick...

8.8CVSS8.5AI score0.03039EPSS
SaveExploits1
Talos
Talos
added 2018/10/01 12:00 a.m.489 views

Foxit PDF Reader Javascript JSON.Stringify this.info Remote Code Execution Vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to...

8.8CVSS8.5AI score0.03197EPSS
SaveExploits1
Talos
Talos
added 2018/10/01 12:00 a.m.512 views

Foxit PDF Reader Javascript removeDataObject Remote Code Execution Vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick...

8.8CVSS8.4AI score0.02114EPSS
SaveExploits1
CNVD
CNVD
added 2018/09/30 12:00 a.m.10 views

Foxit Reader and PhantomPDF Memory Misreference Vulnerability (CNVD-2018-20728)

Foxit Reader is a PDF document reader from China's Foxit Software Corporation.Foxit PhantomPDF is a commercial version. A security vulnerability exists in Foxit Reader and PhantomPDF versions prior to 9.3, which stems from the program's failure to properly handle the properties of the Annotation...

9.8CVSS9.6AI score0.03176EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/09/30 12:00 a.m.8 views

Foxit Reader and PhantomPDF Memory Misreference Vulnerability (CNVD-2018-20727)

Foxit Reader is a PDF document reader from China's Foxit Software Corporation.Foxit PhantomPDF is a commercial version. A security vulnerability exists in Foxit Reader and PhantomPDF versions prior to 9.3, which stems from the program's failure to properly handle the properties of the Annotation...

9.8CVSS9.6AI score0.03176EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/09/30 12:00 a.m.9 views

Foxit Reader and PhantomPDF Memory Misreference Vulnerability (CNVD-2018-20730)

Foxit Reader is a PDF document reader from China's Foxit Software Corporation.Foxit PhantomPDF is a commercial version. A security vulnerability exists in Foxit Reader and PhantomPDF versions prior to 9.3, which stems from the program's failure to properly handle the properties of the Annotation...

9.8CVSS9.6AI score0.03176EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/09/30 12:00 a.m.8 views

Foxit Reader and PhantomPDF Memory Misreference Vulnerability (CNVD-2018-20729)

Foxit Reader is a PDF document reader from China's Foxit Software Corporation.Foxit PhantomPDF is a commercial version. A security vulnerability exists in Foxit Reader and PhantomPDF versions prior to 9.3, which stems from the program's failure to properly handle the properties of the Annotation...

9.8CVSS9.6AI score0.03176EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/09/30 12:00 a.m.9 views

Foxit Reader and PhantomPDF Memory Misreference Vulnerability (CNVD-2018-20731)

Foxit Reader is a PDF document reader from China's Foxit Software Corporation.Foxit PhantomPDF is a commercial version. A security vulnerability exists in Foxit Reader and PhantomPDF versions prior to 9.3, which stems from the program's failure to properly handle the properties of the Annotation...

9.8CVSS9.6AI score0.03176EPSS
SaveExploits0References1
Prion
Prion
added 2018/09/29 5:29 p.m.29 views

Information disclosure

Foxit PhantomPDF and Reader before 9.3 allow remote attackers to trigger Uninitialized Object Information Disclosure because creation of ArrayBuffer and DataView objects is mishandled...

5CVSS7.3AI score0.02442EPSS
SaveExploits1References2Affected Software2
OSV
OSV
added 2018/09/29 5:29 p.m.7 views

CVE-2018-17781

Foxit PhantomPDF and Reader before 9.3 allow remote attackers to trigger Uninitialized Object Information Disclosure because creation of ArrayBuffer and DataView objects is mishandled...

7.5CVSS5.8AI score0.02442EPSS
SaveExploits1References2
Rows per page
Query Builder