Lucene search
K

1979 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/03/22 12:0 a.m.34 views

Foxit PhantomPDF U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.8AI score0.11393EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/03/22 12:0 a.m.2 views

Foxit PhantomPDF 缓冲区错误漏洞

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. Foxit PhantomPDF suffers from an out-of-bounds write vulnerability when processing U3D objects in PDF files. The vulnerability stems from the program not properly validating user input. An attacker could exploit this...

7.8CVSS6AI score0.0284EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/03/22 12:0 a.m.2 views

Foxit PhantomPDF 资源管理错误漏洞

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A memory misreference vulnerability exists in Foxit PhantomPDF when handling U3D objects in PDF files. The vulnerability stems from the program not verifying the existence of an object before performing an operation on it. An...

7.8CVSS6AI score0.03065EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/03/22 12:0 a.m.4 views

Foxit PhantomPDF 缓冲区错误漏洞

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. Foxit PhantomPDF suffers from an out-of-bounds read vulnerability when processing U3D objects in PDF files. The vulnerability is caused due to a lack of proper validation of user-supplied data, which could result in reading...

4.3CVSS5.9AI score0.11393EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2021/03/22 12:0 a.m.30 views

Foxit PhantomPDF < 10.1.3 RCE

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 10.1.3. It is, therefore affected by an out-of-bounds read vulnerability, which can be exploited to cause remote code execution. Note that Nessus has not tested fo...

7.8CVSS7.7AI score0.01822EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/03/22 12:0 a.m.2 views

Foxit PhantomPDF 资源管理错误漏洞

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A memory misreference vulnerability exists in Foxit PhantomPDF. The vulnerability stems from the program not verifying the existence of an object before performing an operation on it. An attacker could use the vulnerability to...

7.8CVSS6AI score0.03065EPSS
Exploits0References4
Zero Day Initiative
Zero Day Initiative
added 2021/03/22 12:0 a.m.35 views

Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U...

7.8CVSS3.9AI score0.0284EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/03/22 12:0 a.m.4 views

Foxit PhantomPDF 缓冲区错误漏洞

Foxit PhantomPDF is China Foxit Foxit company a PDF document reader. An out-of-bounds read vulnerability exists in Foxit PhantomPDF. An attacker can exploit this vulnerability to execute code in the context of the current process...

7.8CVSS5.9AI score0.0284EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/03/22 12:0 a.m.2 views

Foxit PhantomPDF 缓冲区错误漏洞

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A memory corruption vulnerability exists in Foxit PhantomPDF when processing U3D objects in PDF files. The vulnerability stems from the program not properly validating user input. An attacker could exploit this vulnerability t...

7.8CVSS6AI score0.02912EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/03/22 12:0 a.m.2 views

Foxit PhantomPDF 缓冲区错误漏洞

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. Foxit PhantomPDF suffers from an out-of-bounds read vulnerability when processing U3D objects in PDF files. The vulnerability is caused due to a lack of proper validation of user-supplied data, which could result in reading...

4.3CVSS5.9AI score0.11393EPSS
Exploits0References4
Zero Day Initiative
Zero Day Initiative
added 2021/03/22 12:0 a.m.33 views

Foxit PhantomPDF U3DBrowser Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U...

7.8CVSS2.5AI score0.02912EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/03/22 12:0 a.m.4 views

Foxit PhantomPDF 缓冲区错误漏洞

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. Foxit PhantomPDF has a remote code execution vulnerability that can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS6.6AI score0.01822EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/03/22 12:0 a.m.4 views

Foxit PhantomPDF 缓冲区错误漏洞

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. Foxit PhantomPDF suffers from an out-of-bounds read vulnerability when processing U3D objects in PDF files. The vulnerability is caused due to a lack of proper validation of user-supplied data, which could result in reading...

4.3CVSS5.9AI score0.11393EPSS
Exploits0References4
Zero Day Initiative
Zero Day Initiative
added 2021/03/22 12:0 a.m.29 views

Foxit PhantomPDF U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U...

7.8CVSS4.1AI score0.0284EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2021/03/22 12:0 a.m.4 views

PT-2021-17375 · Foxit · Foxit Phantompdf

Name of the Vulnerable Software and Affected Versions: Foxit PhantomPDF version 10.1.0.37527 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. Th...

7.8CVSS7.8AI score0.02912EPSS
Exploits0References5
Zero Day Initiative
Zero Day Initiative
added 2021/03/22 12:0 a.m.29 views

Foxit PhantomPDF U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.8AI score0.11393EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/22 12:0 a.m.38 views

Foxit PhantomPDF U3D File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U...

7.8CVSS3.8AI score0.03065EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/03/22 12:0 a.m.2 views

Foxit PhantomPDF 缓冲区错误漏洞

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. Foxit PhantomPDF suffers from an out-of-bounds read vulnerability when processing U3D objects in PDF files. The vulnerability is caused due to a lack of proper validation of user-supplied data, which could result in reading...

4.3CVSS5.9AI score0.11393EPSS
Exploits0References4
Zero Day Initiative
Zero Day Initiative
added 2021/03/22 12:0 a.m.38 views

Foxit PhantomPDF U3D File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U...

7.8CVSS3.8AI score0.03065EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2021/03/11 12:0 a.m.2 views

The vulnerability of the GetFieldValue function implementation in the program for displaying text in Foxit Reader and the PDF editing program Foxit PhantomPDF allows a perpetrator to execute arbitrary code.

The vulnerability of the GetFieldValue function implementation in programs for displaying text in Foxit Reader and editing PDF files in Foxit PhantomPDF is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

10CVSS7.6AI score0.00374EPSS
Exploits0References4Affected Software2
Rows per page
Query Builder