CVE-2019-20815: Uncontrolled Recursion

An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows stack consumption via nested function calls for XML parsing...

PT-2020-8887

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.6 Description An issue was discovered in Foxit PhantomPDF. It has COM object mishandling when Microsoft Word is used. Recommendations For Foxit PhantomPDF versions prior to 8.3.6, update to version 8.3.6 ...

PT-2020-10788

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.11 Description An issue was discovered in Foxit PhantomPDF. It has a NULL pointer dereference via FXSYS wcslen in an Epub file. Recommendations For versions prior to 8.3.11, update to version 8.3.11 or...

CVE-2020-13808: Loop with Unreachable Exit Condition

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via crafted cross-reference stream data...

PT-2020-13698

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.1 PhantomPDF versions prior to 9.7.1 Description The issue is related to a use-after-free error that occurs when processing a document that lacks a dictionary. Recommendations For Foxit Reader versions prior ...

PT-2020-13693

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.2 PhantomPDF versions prior to 9.7.2 Description An issue allows resource consumption via long strings in the content stream. Recommendations For Foxit Reader versions prior to 9.7.2, update to version 9.7.2 ...

CVE-2020-13809: Uncontrolled Resource Consumption

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via long strings in the content stream...

CVE-2019-20832: Undefined Security Weakness

An issue was discovered in Foxit PhantomPDF before 8.3.10. It has homograph mishandling...

CVE-2020-13810: Improper Verification of Cryptographic Signature

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows signature validation bypass via a modified file or a file with non-standard signatures...

CVE-2019-20817: NULL Pointer Dereference

An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference...

PT-2020-10797

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.10 Description The issue concerns the mishandling of cloud credentials, specifically demonstrated with Google Drive. Recommendations For versions prior to 8.3.10, update to version 8.3.10 or later to...

CVE-2018-21239: Insufficiently Protected Credentials

An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows NTLM credential theft via a GoToE or GoToR action...

PT-2020-8881

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.7 Description The issue allows NTLM credential theft via a GoToE or GoToR action. Recommendations For Foxit PhantomPDF versions prior to 8.3.7, update to version 8.3.7 or later to resolve the issue...

PT-2020-8883

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.2 PhantomPDF versions prior to 9.2 Description An issue was discovered that allows NTLM credential theft via a GoToE or GoToR action. Recommendations For Foxit Reader versions prior to 9.2, update to version 9....

CVE-2018-21237: Insufficiently Protected Credentials

An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows NTLM credential theft via a GoToE or GoToR action...

CVE-2018-21244: Unrestricted Upload of File with Dangerous Type

An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows arbitrary application execution via an embedded executable file in a PDF portfolio, aka FG-VD-18-029...

PT-2020-10791

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF Mac version 3.3 Foxit Reader for Mac versions prior to 3.3 Description An issue was discovered that allows stack consumption due to interaction between ICC-Based color space and Alternate color space. Recommendations For Foxit...

CVE-2020-13815: Uncontrolled Resource Consumption

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It allows stack consumption via a loop of an indirect object reference...

PT-2020-10784

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7 PhantomPDF versions prior to 9.7 Description The issue is related to a NULL pointer dereference that occurs during the parsing of file data. This indicates a problem with how the software handles certain file...

CVE-2019-20837: Improper Verification of Cryptographic Signature

An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It allows signature validation bypass via a modified file or a file with non-standard signatures...