Lucene search
K

1979 matches found

CNNVD
CNNVD
added 2021/01/07 12:0 a.m.3 views

Foxit Reader和Foxit PhantomPDF 竞争条件问题漏洞

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF, which can be exploited by attackers to cause a stack buffer overflow or an out-of-bounds read...

8.1CVSS7.3AI score0.00026EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/01/07 12:0 a.m.4 views

Foxit Reader and PhantomPDF 竞争条件问题漏洞

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker could exploit the vulnerability to cause a stack buffer overflow or out-of-bounds read...

8.1CVSS7.3AI score0.00026EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/01/07 12:0 a.m.3 views

Foxit Reader和Foxit PhantomPDF 竞争条件问题漏洞

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker could exploit the vulnerability to cause a stack buffer overflow or an out-of-bounds read...

8.1CVSS7.3AI score0.00026EPSS
Exploits1References2
CNVD
CNVD
added 2021/01/06 12:0 a.m.2 views

Unspecified Vulnerability in Foxit Reader and PhantomPDF (CNVD-2021-04405)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF, which can be exploited by attackers to spoof authenticated PDF documents via a malicious annotation attack, as the product does not take in...

7.8CVSS6.7AI score0.00101EPSS
Exploits0References1
NVD
NVD
added 2020/12/31 9:15 p.m.18 views

CVE-2020-35931

An issue was discovered in Foxit Reader before 10.1.1 and before 4.1.1 on macOS and PhantomPDF before 9.7.5 and 10.x before 10.1.1 and before 4.1.1 on macOS. An attacker can spoof a certified PDF document via an Evil Annotation Attack because the products fail to consider a null value for a Subty...

7.8CVSS7.5AI score0.00101EPSS
Exploits0References1
Prion
Prion
added 2020/12/31 9:15 p.m.24 views

Code injection

An issue was discovered in Foxit Reader before 10.1.1 and before 4.1.1 on macOS and PhantomPDF before 9.7.5 and 10.x before 10.1.1 and before 4.1.1 on macOS. An attacker can spoof a certified PDF document via an Evil Annotation Attack because the products fail to consider a null value for a Subty...

6.8CVSS7.5AI score0.00101EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2020/12/31 8:14 p.m.17 views

CVE-2020-35931

An issue was discovered in Foxit Reader before 10.1.1 and before 4.1.1 on macOS and PhantomPDF before 9.7.5 and 10.x before 10.1.1 and before 4.1.1 on macOS. An attacker can spoof a certified PDF document via an Evil Annotation Attack because the products fail to consider a null value for a Subty...

7.5AI score0.00101EPSS
Exploits0References1
CVE
CVE
added 2020/12/31 8:14 p.m.93 views

CVE-2020-35931

Foxit PDF products are affected by CVE-2020-35931: Foxit Reader before 10.1.1 and PhantomPDF before 9.7.5, and 10.x before 10.1.1 (also macOS 4.1.x) are vulnerable to an Evil Annotation Attack that can spoof certified PDFs by not handling a null Subtype in the Annotation dictionary during increme...

7.8CVSS7.6AI score0.00101EPSS
Exploits0References1Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/12/30 12:0 a.m.1 views

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to the use after release, allows a violator to execute arbitrary code.

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program is related to its use after release. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

9.3CVSS7.9AI score0.198EPSS
Exploits1References4Affected Software2
Tenable Nessus
Tenable Nessus
added 2020/12/30 12:0 a.m.47 views

Foxit PhantomPDF < 9.7.5 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 9.7.5. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's...

8.8CVSS6.8AI score0.25714EPSS
Exploits5References8
Tenable Nessus
Tenable Nessus
added 2020/12/28 12:0 a.m.36 views

Foxit PhantomPDF < 4.1 Code Injection (macOS)

The version of Foxit PhantomPDF for Mac installed on the remote macOS host is prior to 4.1. It is, therefore, affected by a code injection or information disclosure vulnerability because the Hardened Runtime capability was not enabled during code signing. Note that Nessus has not tested for this...

7.5CVSS7.6AI score0.00007EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2020/12/23 12:0 a.m.42 views

Foxit PhantomPDF < 10.1.1 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 10.1.1. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's...

8.8CVSS6.8AI score0.25714EPSS
Exploits5References8
CNVD
CNVD
added 2020/12/16 12:0 a.m.1 views

Foxit Reader and PhantomPDF null pointer dereference vulnerability (CNVD-2021-04406)

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. mPDF is a use of PHP written for the conversion of HTML into PDF documents library. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker can exploit the vulnerability to cause the application to crash...

5.5CVSS6.8AI score0.00022EPSS
Exploits0References1
NVD
NVD
added 2020/12/15 1:15 p.m.12 views

CVE-2020-28203

An issue was discovered in Foxit Reader and PhantomPDF 10.1.0.37527 and earlier. There is a null pointer access/dereference while opening a crafted PDF file, leading the application to crash denial of service...

5.5CVSS5.4AI score0.00022EPSS
Exploits0References1
Prion
Prion
added 2020/12/15 1:15 p.m.15 views

Null pointer dereference

An issue was discovered in Foxit Reader and PhantomPDF 10.1.0.37527 and earlier. There is a null pointer access/dereference while opening a crafted PDF file, leading the application to crash denial of service...

4.3CVSS6.1AI score0.00022EPSS
Exploits0References1Affected Software2
CVE
CVE
added 2020/12/15 12:53 p.m.60 views

CVE-2020-28203

CVE-2020-28203 affects Foxit Reader and PhantomPDF up to 10.1.0.37527, where opening a crafted PDF can trigger a null pointer dereference, causing the application to crash (denial of service). This is supported by multiple sources in the connected documents, including the NVD entry and vendor dis...

5.5CVSS6AI score0.00022EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2020/12/15 12:53 p.m.13 views

CVE-2020-28203

An issue was discovered in Foxit Reader and PhantomPDF 10.1.0.37527 and earlier. There is a null pointer access/dereference while opening a crafted PDF file, leading the application to crash denial of service...

6.1AI score0.00022EPSS
Exploits0References1
CNNVD
CNNVD
added 2020/12/15 12:0 a.m.3 views

Foxit Reader and PhantomPDF 代码问题漏洞

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. mPDF is a use of PHP written for the conversion of HTML into PDF documents library. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker can exploit the vulnerability to cause the application to crash...

5.5CVSS6.8AI score0.00022EPSS
Exploits0References2
NCSC
NCSC
added 2020/12/10 12:0 a.m.3 views

Vulnerabilities fixed in Foxit Reader and Foxit PhantomPDF

Foxit has fixed vulnerabilities in Foxit Reader and Foxit PhantomPDF. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights Foxit has released...

8.8CVSS7.5AI score0.25714EPSS
Exploits5
Kaspersky
Kaspersky
added 2020/12/09 12:0 a.m.75 views

KLA12028 Multiple vulnerabilities in Foxit Reader and Foxit PhantomPDF

Multiple vulnerabilities were found in Foxit Reader and Foxit PhantomPDF. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in PDF file can be exploited remotely to...

8.8CVSS8.9AI score0.25714EPSS
Exploits5References4
Rows per page
Query Builder