CVE-2020-13560

CVE-2020-13560 affects Foxit PDF Reader (example: version 10.1.0.37527) and is a use-after-free in the JavaScript engine. A specially crafted PDF can trigger reuse of freed memory, enabling arbitrary code execution. User interaction is required (opening the malicious file). If the browser plugin ...

CVE-2020-13557

A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the...

CVE-2020-13557

CVE-2020-13557 is a use-after-free in Foxit PDF Reader’s JavaScript engine (Foxit Reader 10.1.0.37527). A crafted PDF can trigger reuse of freed memory, enabling arbitrary code execution. User interaction is required (opening the malicious file); if the browser plugin is enabled, visiting a malic...

CVE-2020-13547: Access of Resource Using Incompatible Type

A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger an improper use of an object, resulting in memory corruption and arbitrary code execution. An attacker needs to trick the user to...

CVE-2020-13570: Use After Free

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger the reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicio...

CVE-2020-13560: Use After Free

A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the...

CVE-2020-13557: Use After Free

A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the...

Denial of Service Vulnerability in Foxit Reader (CNVD-2020-75689)

Foxit Reader is a PDF document reader. Foxit Reader has a denial of service vulnerability that can be exploited by attackers to cause denial of service attacks...

Vulnerability Spotlight: Multiple vulnerabilities in Foxit PDF Reader JavaScript engine

Aleksandar Nikolic of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw.Executive summary Cisco Talos recently discovered multiple vulnerabilities in Foxit PDF Reader’s JavaScript engine. Foxit PDF Reader is a commonly used PDF reader that contains many features, including the...

PT-2020-5251

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader version 10.1.0.37527 Description A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader. A specially crafted PDF document can trigger reuse of previously free memory, which can lead...

PT-2020-5277

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader version 10.1.0.37527 Description A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader. A specially crafted PDF document can trigger reuse of previously free memory, which can lead...

PT-2020-5276

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader version 10.1.0.37527 Foxit PhantomPDF affected versions not specified Description A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader. A specially crafted PDF document can trigge...

PT-2020-5273

Name of the Vulnerable Software and Affected Versions Foxit Software’s PDF Reader version 10.1.0.37527 Foxit PhantomPDF affected versions not specified Description A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader. A specially crafted PDF document can...

Foxit Reader JavaScript choice field format event use-after-free vulnerability

Summary A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open t...

Foxit Reader Javascript Field fileSelect Use After Free Vulnerability

Summary A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open t...

Foxit Reader JavaScript choice field use-after-free vulnerability

Summary A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open t...

Aurora PDF Reader has a dll hijacking vulnerability (NVD-C-2020-294256)

Aurora PDF Reader is a PDF file viewing software. Aurora PDF Reader has a dll hijacking vulnerability that can be exploited by attackers to load malicious dlls and execute malicious code...

Windows 10, iOS, Chrome, Firefox and Others Hacked at Tianfu Cup Competition

Multiple software products from Adobe, Apple, Google, Microsoft, Mozilla, and Samsung were successfully pwned with previously unseen exploits in Tianfu Cup 2020, the third edition of the international cybersecurity contest held in the city of Chengdu, China. "Many mature and hard targets have bee...

Vulnerability Spotlight: Multiple JavaScript vulnerabilities in Adobe Acrobat Reader

Aleksandar Nikolic of Cisco Talos discovered these vulnerabilities. Blog by Joe Marshall Cisco Talos recently discovered an heap buffer overflow and a use after free vulnerability in Adobe Acrobat Reader. Adobe Acrobat Reader is one of the most popular and feature-rich PDF readers on the market. ...

Command Execution Vulnerability in Aurora PDF Reader pc Client Software

Aurora PDF Reader is a reading conversion tool. Aurora PDF Reader pc client software has a command execution vulnerability that can be exploited by an attacker to gain control of the server...