Lucene search
K

1979 matches found

OSV
OSV
added 2021/07/09 6:15 p.m.4 views

CVE-2021-33795

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures because the certificate name, document owner, and signature author are mishandled...

5.5CVSS6.1AI score0.00023EPSS
Exploits0References1
OSV
OSV
added 2021/07/09 6:15 p.m.2 views

CVE-2021-33792

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary...

7.8CVSS5.8AI score0.00035EPSS
Exploits0References1
Prion
Prion
added 2021/07/09 6:15 p.m.20 views

Out-of-bounds

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary...

6.8CVSS7.6AI score0.00035EPSS
Exploits0References1Affected Software2
Prion
Prion
added 2021/07/09 6:15 p.m.18 views

Design/Logic Flaw

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures because the certificate name, document owner, and signature author are mishandled...

4.3CVSS5.6AI score0.00023EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2021/07/09 5:14 p.m.17 views

CVE-2021-33792

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary...

7.8AI score0.00035EPSS
Exploits0References1
CVE
CVE
added 2021/07/09 5:14 p.m.82 views

CVE-2021-33792

CVE-2021-33792 affects Foxit Reader prior to 10.1.4 and Foxit PhantomPDF prior to 10.1.4. The root cause is an out-of-bounds write triggered by a crafted /Size key in the Trailer dictionary. Public references consistently describe a buffer/space issue leading to memory corruption in these PDF pro...

7.8CVSS7.5AI score0.00035EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2021/07/09 5:13 p.m.13 views

CVE-2021-33795

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures because the certificate name, document owner, and signature author are mishandled...

5.8AI score0.00023EPSS
Exploits0References1
CVE
CVE
added 2021/07/09 5:13 p.m.78 views

CVE-2021-33795

CVE-2021-33795 affects Foxit Reader before 10.1.4 and Foxit PhantomPDF before 10.1.4. The root cause is mishandling of the certificate name, document owner, and signature author in PDF signatures, resulting in incorrect document signatures. Reported impact indicates partial integrity impact with ...

5.5CVSS5.6AI score0.00023EPSS
Exploits0References1Affected Software2
CNNVD
CNNVD
added 2021/07/09 12:0 a.m.3 views

Foxit Reader 和 Foxit PhantomPDF 缓冲区错误漏洞

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A buffer overflow vulnerability exists in Foxit Reader and Foxit PhantomPDF, no details of the vulnerability are available at this time...

7.8CVSS5.8AI score0.00035EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/07/09 12:0 a.m.4 views

Foxit Reader和Foxit PhantomPDF 安全漏洞

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and Foxit PhantomPDF, and no details of the vulnerability are available at this time...

5.5CVSS5.5AI score0.00023EPSS
Exploits0References1
NVD
NVD
added 2021/06/16 11:15 p.m.13 views

CVE-2021-31476

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS0.00583EPSS
Exploits0References2
OSV
OSV
added 2021/06/16 11:15 p.m.0 views

CVE-2021-31476

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.5AI score
Exploits0References2
Prion
Prion
added 2021/06/16 11:15 p.m.18 views

Type confusion

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS7.8AI score0.00583EPSS
Exploits0References2Affected Software2
CVE
CVE
added 2021/06/16 10:15 p.m.212 views

CVE-2021-31476

CVE-2021-31476 affects Foxit PhantomPDF 10.1.3.37598. The flaw is in the handling of XFA templates and stems from a lack of input validation, leading to a type confusion condition. This can allow remote attackers to execute arbitrary code in the context of the target process, with user interactio...

7.8CVSS8AI score0.00583EPSS
Exploits0References2Affected Software2
Cvelist
Cvelist
added 2021/06/16 10:15 p.m.22 views

CVE-2021-31476

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS8.3AI score0.00583EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/05/26 12:0 a.m.2 views

Foxit PhantomPDF 安全漏洞

Foxit PhantomPDF is a PDF document reader from the Chinese company Foxit. A security vulnerability exists in Foxit PhantomPDF that stems from a lack of proper validation of user-supplied data, which could allow a remote attacker to execute arbitrary code...

7.8CVSS7.8AI score0.00583EPSS
Exploits0References3
Zero Day Initiative
Zero Day Initiative
added 2021/05/26 12:0 a.m.210 views

Foxit PhantomPDF XFA Template Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of X...

7.8CVSS2.4AI score0.00583EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2021/05/10 12:0 a.m.48 views

Foxit PhantomPDF < 10.1.4 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 10.1.4. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's...

8.8CVSS7.6AI score0.198EPSS
Exploits2References17
NVD
NVD
added 2021/03/30 3:15 p.m.12 views

CVE-2021-27267

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS0.03065EPSS
Exploits0References2
NVD
NVD
added 2021/03/30 3:15 p.m.9 views

CVE-2021-27271

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS0.02912EPSS
Exploits0References2
Rows per page
Query Builder