CVE-2019-20828: Buffer Copy without Checking Size of Input

An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs...

CVE-2019-20824: NULL Pointer Dereference

An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a NULL pointer dereference via FXSYSwcslen in an Epub file...

PT-2020-10794

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.6 Foxit PhantomPDF versions prior to 9.6 Description An issue was discovered that results in an out-of-bounds write when Internet Explorer is used. Recommendations For Foxit Reader versions prior to 9.6, update...

CVE-2018-21238: Uncontrolled Resource Consumption

An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows memory consumption via an ArrayBuffer0xfffffffe call...

PT-2020-10777

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.12 Description An issue was discovered that results in a NULL pointer dereference. Recommendations For versions prior to 8.3.12, update to version 8.3.12 or later to resolve the issue...

PT-2020-10780

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.12 Description An issue was discovered that causes a NULL pointer dereference during the parsing of file data. Recommendations For versions prior to 8.3.12, update to version 8.3.12 or later to resolve th...

PT-2020-10778

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.12 Description An issue in Foxit PhantomPDF allows memory consumption due to data creation for each page at the application level. Recommendations For versions prior to 8.3.12, update to version 8.3.12 or...

CVE-2019-20834: Improper Verification of Cryptographic Signature

An issue was discovered in Foxit PhantomPDF before 8.3.10. It allows signature validation bypass via a modified file or a file with non-standard signatures...

PT-2020-8884

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.2 PhantomPDF versions prior to 9.2 Description An issue was discovered that allows memory consumption via an ArrayBuffer0xfffffffe call. Recommendations For Foxit Reader versions prior to 9.2, update to version...

PT-2020-10782

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7 Description An issue allows memory consumption because data is created for each page at the application level. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.7, update to...

CVE-2020-13805: Improper Restriction of Excessive Authentication Attempts

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack mishandling because the CAS service lacks a limit on login failures...

CVE-2019-20827: Out-of-bounds Write

An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It allows stack consumption because of interaction between ICC-Based color space and Alternate color space...

CVE-2019-20833: Improper Authentication

An issue was discovered in Foxit PhantomPDF before 8.3.10. It has mishandling of cloud credentials, as demonstrated by Google Drive...

PT-2020-8882

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.7 Description An issue in Foxit PhantomPDF allows memory consumption via an ArrayBuffer0xfffffffe call. Recommendations For Foxit PhantomPDF versions prior to 8.3.7, update to version 8.3.7 or later to...

CVE-2019-20818: Allocation of Resources Without Limits or Throttling

An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows memory consumption because data is created for each page of an application level...

PT-2020-10787

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.11 Description A buffer overflow issue exists due to a looping correction not occurring after JavaScript updates Field APs. Recommendations For versions prior to 8.3.11, update to version 8.3.11 or later ...

PT-2020-10785

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF Mac versions prior to 3.4 Description An issue was discovered that results in a NULL pointer dereference. Recommendations For versions prior to 3.4, update to version 3.4 or later to resolve the issue...

CVE-2018-21242: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows Remote Code Execution via a GoToE or GoToR action...

CVE-2020-13804: Use of Hard-coded Credentials

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows information disclosure of a hardcoded username and password in the DocuSign plugin...

PT-2020-10792

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.6 Description A buffer overflow issue was discovered due to a looping correction not occurring after JavaScript updates Field APs. Recommendations For Foxit Reader and PhantomPDF versions prior t...