Foxit PhantomPDF U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PhantomPDF U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U...

Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U...

PT-2021-17370

Name of the Vulnerable Software and Affected Versions: Foxit PhantomPDF version 10.1.0.37527 Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious...

PT-2021-17366

Name of the Vulnerable Software and Affected Versions: Foxit PhantomPDF version 10.1.0.37527 Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious...

PT-2021-17365

Name of the Vulnerable Software and Affected Versions: Foxit PhantomPDF version 10.1.0.37527 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. Th...

PT-2021-17371

Name of the Vulnerable Software and Affected Versions: Foxit PhantomPDF version 10.1.0.37527 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. Th...

PT-2021-17373

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 10.1.0.37527 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...

PT-2021-17368

Name of the Vulnerable Software and Affected Versions: Foxit PhantomPDF version 10.1.0.37527 Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required to exploit this, where the target must visit a malicious page or...

PT-2021-17367

Name of the Vulnerable Software and Affected Versions: Foxit PhantomPDF version 10.1.0.37527 Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious...

Foxit PhantomPDF buffer error vulnerability

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. Foxit PhantomPDF suffers from an out-of-bounds read vulnerability when processing U3D objects in PDF files. The vulnerability is caused due to a lack of proper validation of user-supplied data, which could result in reading...

Foxit PhantomPDF resource management error vulnerability

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A memory misreference vulnerability exists in Foxit PhantomPDF when handling U3D objects in PDF files. The vulnerability stems from the program not verifying the existence of an object before performing an operation on it. An...

Foxit PhantomPDF buffer error vulnerability

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. Foxit PhantomPDF suffers from an out-of-bounds write vulnerability when processing U3D objects in PDF files. The vulnerability stems from the program not properly validating user input. An attacker could exploit this...

Foxit PhantomPDF buffer error vulnerability

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. Foxit PhantomPDF suffers from an out-of-bounds read vulnerability when processing U3D objects in PDF files. The vulnerability is caused due to a lack of proper validation of user-supplied data, which could result in reading...

XStream code issue vulnerabilities

XStream is a simple Java-based library , Java objects serialized to xml and vice versa i.e. : Java objects and xml documents can easily be converted to each other . XStream has a server-side request forgery vulnerability that can be exploited by an attacker to manipulate the processed input strea...

Foxit PhantomPDF buffer error vulnerability

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A memory corruption vulnerability exists in Foxit PhantomPDF when processing U3D objects in PDF files. The vulnerability stems from the program not properly validating user input. An attacker could exploit this vulnerability t...

PT-2021-17369

Name of the Vulnerable Software and Affected Versions: Foxit PhantomPDF version 10.1.0.37527 Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious...

PT-2021-17372

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 10.1.0.37527 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...

PT-2021-28168

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 2 crash type has been identified. The crash state involves dxf objects read and dwg read dxf functions in llvmfuzz.c...

libdw Heap Buffer Overflow DoS

The vulnerability of the libdw library, which contains utilities for processing ELF objects, is related to incorrect checks for the end of the attribute list in dwarfgetabbrev.c and dwarfhasattr.c. Exploiting this vulnerability could allow an attacker to cause service failures remotely...