CVE-2022-37381

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-43638

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.1.12430. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-43649

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.2.12465. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-37387

CVE-2022-37387 affects Foxit PDF Reader 11.2.2.53575. The Red Hat and NVD entries confirm the flaw is in AcroForms handling, arising from not validating the existence of an object before performing operations. This can allow code execution in the context of the current process when a user visits ...

CVE-2022-43649

CVE-2022-43649 affects Foxit PDF Reader 12.0.2.12465, where the flaw in handling Annotation objects occurs due to not validating object existence before operations, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). Refe...

CVE-2022-37381

CVE-2022-37381 affects Foxit PDF Reader. The flaw is in the AFSpecial_KeystrokeEx method, arising from not validating the existence of an object before performing operations, which allows an attacker to execute code in the context of the current process. Exploitation requires user interaction (th...

CVE-2022-37382

CVE-2022-37382 affects Foxit PDF Reader 11.2.1.53537 (and related Foxit/Editor variants). The root cause is a missing validation of an object before performing operations in removeIcon, allowing information disclosure and, with additional vulnerabilities, potential arbitrary code execution in the...

CVE-2022-37388

CVE-2022-37388 affects Foxit PDF Reader 11.2.2.53575. The flaw is in PDF parsing where crafted data can trigger a read past the end of an allocated buffer, allowing remote code execution in the context of the current process. User interaction is required (visiting a malicious page or opening a ma...

CVE-2022-43638

CVE-2022-43638 affects Foxit PDF Reader 12.0.1.12430. The flaw is in U3D file parsing, arising from not validating the existence of an object before performing operations, which can allow a remote attacker to execute arbitrary code. Exploitation requires user interaction (target must visit a mali...

CVE-2022-37380

Foxit PDF Reader 11.2.1.53537 is affected by a vulnerability in the handling of ADBC objects that can be triggered by JavaScript actions, allowing read past the end of an allocated object. An attacker could leverage this with other vulnerabilities to execute arbitrary code in the context of the c...

CVE-2022-37390

CVE-2022-37390 affects Foxit PDF Reader 11.2.2.53575; the flaw lies in AcroForms handling where the code does not validate the existence of an object before performing operations. This can allow code execution in the context of the current process after the target visits a malicious page or opens...

CVE-2022-37384

CVE-2022-37384 affects Foxit PDF Reader 11.2.1.53537. The flaw exists in the delay method due to not validating the existence of an object before operations, enabling arbitrary code execution when a user visits a malicious page or opens a malicious file (requires user interaction). Root cause per...

CVE-2022-37391

Foxit PDF Reader 11.2.2.53575 is affected; exploit arises in AcroForms handling due to not validating object existence before operations, enabling remote code execution in the process with user interaction (visiting a malicious page or opening a malicious file). No remediation details are provide...

CVE-2022-37387

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-43640

The vulnerability CVE-2022-43640 affects Foxit PDF Reader 12.0.1.12430. The flaw is in PDF parsing: crafted data in a PDF can trigger a read past the end of an allocated buffer. This may allow information disclosure and, in conjunction with other issues, could enable arbitrary code execution in t...

CVE-2022-37383

CVE-2022-37383 concerns Foxit PDF software (Reader/Editor/PhantomPDF lineage) with multiple vulnerabilities. The core issue is in the handling of Doc objects, Annotation objects, arrays, or JavaScript-driven actions, enabling read past end-of-allocated-object scenarios. Impact statements across c...

CVE-2022-37389

CVE-2022-37389 affects Foxit PDF Reader (11.2.2.53575). The root cause is improper handling in AcroForms due to not validating object existence before operations, enabling remote code execution when a user visits a malicious page or opens a malicious file. The vulnerability requires user interact...

CVE-2022-43639

Foxit PDF Reader 12.0.1.12430 is affected by CVE-2022-43639 due to improper handling of U3D files. The flaw arises from not validating object existence before operations, enabling remote code execution when a user opens a malicious file or visits a malicious page. Exploitation requires user inter...

CVE-2022-43641

CVE-2022-43641 affects Foxit PDF Reader 12.0.1.12430. The issue arises in parsing U3D files due to not validating an object's existence before operations, enabling information disclosure and, with other vulnerabilities, potential arbitrary code execution in the target process. Exploitation requir...

CVE-2022-37386

CVE-2022-37386 affects Foxit PDF Reader 11.2.2.53575. The issue is in the resetForm method, where JavaScript actions can trigger a read past the end of an allocated object. This can be leveraged with other vulnerabilities to execute arbitrary code in the target process, with user interaction requ...