CVE-2020-7763 Arbitrary File Read

This affects the package phantom-html-to-pdf before 0.6.1...

CVE-2020-7763

CVE-2020-7763 affects the npm package phantom-html-to-pdf and is an arbitrary file read vulnerability present in versions before 0.6.1. The weakness is demonstrated by a PoC (in the GitHub advisory and Snyk reference) that bypasses file access restrictions to read local host files (e.g., using wi...

@dfeidao/server (>=4.5.201902251314 <=4.6.201910181238), @fabrix/spool-pdf (>=1.5.0 <=1.5.0-alpha.1) +23 more potentially affected by CVE-2020-7763 via phantom-html-to-pdf (>=0.1.2 <=0.6.0)

phantom-html-to-pdf NPM version =0.1.2, =4.5.201902251314, =1.5.0, =5.0.201901071713, =5.0.201812141540, =1.0.1-server20190117165116, =1.0.201901260938, =2.0.0, =1.0.202005312012, =1.0.3, =0.1.0, =0.4.0, =1.0.1, =1.0.3 - jsreport-fop-xsl-pdf =1.0.4 and more Source cves: CVE-2020-7763 Source...

Arbitrary File Read

Overview phantom-html-to-pdf is a Convert html to pdf using phantomjs Affected versions of this package are vulnerable to Arbitrary File Read. PoC var fs = require'fs' var conversion = require"phantom-html-to-pdf"; conversion.allowLocalFilesAccess = false conversion html:...

Split-Second Phantom Images Fool Autopilots

Researchers are tricking autopilots by inserting split-second images into roadside billboards. Researchers at Israels Ben Gurion University of the Negev … previously revealed that they could use split-second light projections on roads to successfully trick Teslas driver-assistance systems into...

Foxit Reader and PhantomPDF Code Injection Vulnerability

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A code injection vulnerability exists in Foxit Reader and PhantomPDF versions prior to 4.1 on macOS. The vulnerability stems from external input data to construct code segments in the process, the networ...

Foxit Reader and PhantomPDF Buffer Overflow Vulnerability (CNVD-2020-57568)

Reader is a set of PDF document reader software . Foxit Reader is a PDF document reader . V8 is one of the open source JavaScript engine . mPDF is a use of PHP to write for the conversion of HTML into PDF files library . A buffer overflow vulnerability exists in Foxit Reader and PhantomPDF versio...

CVE-2020-26539

An issue was discovered in Foxit Reader and PhantomPDF before 10.1. When there is a multiple interpretation error for /V in the Additional Action and Field dictionaries, a use-after-free can occur with resultant remote code execution or an information leak...

Foxit Reader and PhantomPDF Resource Management Error Vulnerability (CNVD-2020-65177)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A resource management error vulnerability exists in the NodeProperties::InferReceiverMapsUnsafe method in Foxit Reader 10.0.0.35798 and earlier versions and Foxit PhantomPDF 10.0.0.35798 and earlier...

Foxit Reader and PhantomPDF Resource Management Error Vulnerability (CNVD-2020-32443)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A resource management error vulnerability exists in Foxit Reader versions prior to 9.7.1 and PhantomPDF versions prior to 9.7.1. The vulnerability stems from a networked system or product that improperly...

Foxit Reader and PhantomPDF Resource Management Error Vulnerability (CNVD-2020-32082)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A resource management error vulnerability exists in Foxit Reader versions prior to 9.7.2 and PhantomPDF versions prior to 9.7.2, which is caused by the execution of JavaScript code after a delete or clos...

Foxit Reader and PhantomPDF Resource Management Error Vulnerability (CNVD-2020-32085)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A resource management error vulnerability exists in Foxit Reader versions prior to 9.7.2 and PhantomPDF versions prior to 9.7.2. An attacker can exploit this vulnerability to cause a denial of service...

Foxit PhantomPDF Code Issue Vulnerability (CNVD-2020-32086)

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A code issue vulnerability exists in Foxit PhantomPDF versions prior to 8.3.12. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2019-20836

An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has mishandling of cloud credentials, as demonstrated by Google Drive...

CVE-2019-20835

An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has homograph mishandling...

CVE-2019-20825

An issue was discovered in Foxit PhantomPDF before 8.3.11. It has an out-of-bounds write when Internet Explorer is used...

CVE-2018-21240

An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows memory consumption via an ArrayBuffer0xfffffffe call...

CVE-2020-13814

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It has a use-after-free via a document that lacks a dictionary...

CVE-2019-20822

An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.7.0.29430. It has an out-of-bounds write via incorrect image data...

CVE-2020-13807

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has circular reference mishandling that causes a loop...