PT-2020-10795

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.5.0.20733 Description An issue was discovered in the 3D Plugin Beta, causing a crash due to void data mishandling. Recommendations For versions prior to 9.5.0.20733, update to version 9.5.0.20733...

PT-2020-10786

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7.0.29430 Description An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF. It has an out-of-bounds write via incorrect image data. Recommendations For versions prior to...

PT-2020-13699

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.1 PhantomPDF versions prior to 9.7.1 Description The issue allows stack consumption via a loop of an indirect object reference. Recommendations For Foxit Reader versions prior to 9.7.1, update to version 9.7....

CVE-2019-20819: Uncontrolled Recursion

An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows stack consumption via nested function calls for XML parsing...

PT-2020-8885

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.6 Description An issue was discovered in Foxit PhantomPDF that allows a DLL to execute remote code due to an untrusted search path. Recommendations For versions prior to 8.3.6, update to version 8.3.6 or...

PT-2020-10793

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.6 Description An issue was discovered that leads to a NULL pointer dereference via FXSYS wcslen when processing an Epub file. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.6...

PT-2020-13691

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.2 PhantomPDF versions prior to 9.7.2 Description The issue is related to circular reference mishandling, which causes a loop. Recommendations For Foxit Reader versions prior to 9.7.2, update to version 9.7.2 ...

CVE-2019-20831: Undefined Security Weakness

An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.5.0.20733. It has void data mishandling, causing a crash...

PT-2020-13689

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.2 PhantomPDF versions prior to 9.7.2 Description The issue is related to brute-force attack mishandling due to the CAS service lacking a limit on login failures. Recommendations For Foxit Reader versions prio...

CVE-2018-21241: Untrusted Search Path

An issue was discovered in Foxit PhantomPDF before 8.3.6. It has an untrusted search path that allows a DLL to execute remote code...

PT-2020-13687

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF Mac versions prior to 4.0 Foxit Reader for Mac versions prior to 4.0 Description The issue allows signature validation bypass via a modified file or a file with non-standard signatures. Recommendations For Foxit PhantomPDF Mac...

PT-2020-10783

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7 Description An issue was discovered that allows stack consumption via nested function calls for XML parsing. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.7, update to...

PT-2020-10781

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7 Description An issue was discovered that results in a NULL pointer dereference. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.7, update to version 9.7 or later to resolve...

PT-2020-10790

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF Mac version 3.3 Foxit Reader for Mac versions prior to 3.3 Description An issue was discovered that results in a NULL pointer dereference. Recommendations For Foxit PhantomPDF Mac version 3.3, update to a version that contains...

PT-2020-13690

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.2 PhantomPDF versions prior to 9.7.2 Description The issue is related to a use-after-free error caused by JavaScript execution after a deletion or close operation. Recommendations For Foxit Reader versions...

PT-2020-13692

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7.2 Description An issue allows resource consumption via crafted cross-reference stream data. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.7.2, update to version 9.7.2 or...

PT-2020-13694

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7.2 Description The issue allows signature validation bypass via a modified file or a file with non-standard signatures. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.7.2,...

PT-2020-10798

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.10 Description An issue allows signature validation bypass via a modified file or a file with non-standard signatures. Recommendations For Foxit PhantomPDF versions prior to 8.3.10, update to version 8.3....

CVE-2019-20815: Uncontrolled Recursion

An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows stack consumption via nested function calls for XML parsing...

PT-2020-8887

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.6 Description An issue was discovered in Foxit PhantomPDF. It has COM object mishandling when Microsoft Word is used. Recommendations For Foxit PhantomPDF versions prior to 8.3.6, update to version 8.3.6 ...