1979 matches found
Foxit Reader 7.3.4.311 Multiple Vulnerabilities
Foxit PhantomPDF is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
Heap overflow
Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service memory corruption and application crash or potentially execute arbitrary code via the Bezier data in a crafted PDF file...
CVE-2016-6169
Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service memory corruption and application crash or potentially execute arbitrary code via the Bezier data in a crafted PDF file...
Design/Logic Flaw
Use-after-free vulnerability in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service application crash and execute arbitrary code via a crafted PDF file...
CVE-2016-6168
Use-after-free vulnerability in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service application crash and execute arbitrary code via a crafted PDF file...
CVE-2016-6169
Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service memory corruption and application crash or potentially execute arbitrary code via the Bezier data in a crafted PDF file...
CVE-2016-6168
Use-after-free vulnerability in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service application crash and execute arbitrary code via a crafted PDF file...
CVE-2016-6169
Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service memory corruption and application crash or potentially execute arbitrary code via the Bezier data in a crafted PDF file...
CVE-2016-6169
CVE-2016-6169 describes a heap-based buffer overflow in Foxit Reader and PhantomPDF versions 7.3.4.311 and earlier on Windows. The vulnerability allows memory corruption and application crashes, potentially enabling arbitrary code execution via Bezier data in a crafted PDF. Affected components ar...
CVE-2016-6168
Use-after-free vulnerability in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service application crash and execute arbitrary code via a crafted PDF file...
CVE-2016-6168
CVE-2016-6168 affects Foxit Reader and Foxit PhantomPDF 7.3.4.311 and earlier on Windows. A use-after-free in the PDF handling can lead to denial of service and arbitrary code execution via a crafted PDF. The issue is publicly documented across multiple sources; remediation is to update to Foxit ...
SRC-2018-0013 : Foxit Reader PDF Parsing U3D Out-of-Bounds Write Remote Code Execution Vulnerability
Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
SRC-2018-0012 : Foxit Reader PDF Parsing U3D Heap-based Buffer Overflow Remote Code Execution Vulnerability
Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
SRC-2018-0014 : Foxit Reader PDF Parsing U3D Out-of-Bounds Read Remote Code Execution Vulnerability
Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
SRC-2018-0018 : Foxit Reader PDF Parsing U3D Type Confusion Remote Code Execution Vulnerability
Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
Foxit PhantomPDF < 8.3.5 Multiple Vulnerabilities
According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 8.3.5. It is, therefore, affected by multiple arbitrary code execution and information disclosure vulnerabilities. C Tenable Network Security, Inc...
Foxit PhantomPDF < 9.0 Multiple Vulnerabilities
According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 9.0. It is, therefore, affected by multiple arbitrary code execution and information disclosure vulnerabilities. C Tenable Network Security, Inc...
Foxit Reader and PhantonPDF XFA gotoURL Command Injection (CVE-2017-10953; CVE-2019-8160)
A command injection vulnerability exists in the XFA component of Foxit Reader and PhantomPDF. This vulnerability is due to improper handling of user-supplied string for the gotoURL function call. A remote attacker could exploit this vulnerability by enticing a victim user to visit a malicious web...
Code injection
Foxit Reader 8.3.2.25013 and earlier and Foxit PhantomPDF 8.3.2.25013 and earlier, when running in single instance mode, allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting at...
CVE-2017-14694
Foxit Reader 8.3.2.25013 and earlier and Foxit PhantomPDF 8.3.2.25013 and earlier, when running in single instance mode, allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting at...