2000 matches found
cve-2018-9951
Foxit Reader CPDFObject 释放后使用远程代码执行漏洞 漏洞 引用已释放的内存可能导致程序崩溃、使用意外值或执行代码 漏洞描述 该漏洞允许远程攻击者在受影响的 Foxit Reader 安装上执行任意代码。利用该漏洞需要用户交互，即目标必须访问恶意页面或打开恶意文件。 具体缺陷存在于处理 CPDFObject 对象时。该问题源于在对对象执行操作之前未验证对象是否存在。攻击者可利用此漏洞在当前进程上下文中执行代码。 CVE ID CVE-2018-9951 厂商 www.foxitsoftware.com 产品 Foxit Reader 8.3.5.30351 及更早版...
PS-2017-13---CVE-2018-9950
Foxit Reader PDF 파싱 범위를 벗어난 읽기 정보 노출 취약점 취약점 메모리 버퍼 경계 내 작업 제한 부적절 취약점 취약점 설명 이 취약점은 원격 공격자가 Foxit Reader의 취약한 설치에서 민감한 정보를 노출할 수 있게 합니다. 이 취약점을 악용하려면 사용자 상호작용이 필요하며, 대상이 악성 페이지를 방문하거나 악성 파일을 열어야 합니다. 구체적인 결함은 PDF 문서 파싱에 존재합니다. 문제는 사용자가 제공한 데이터의 적절한 검증 부족으로 인해 할당된 객체의 끝을 넘어 읽기가 발생할 수 있습니다. 공격자는 이...
CVE-2021-27265
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-27263
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2018-14442
Foxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free that leads to Remote Code Execution, aka V-88f4smlocs...
CVE-2021-41782
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled...
CVE-2021-41784
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled...
CVE-2021-27264
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-27266
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-33792
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary...
CVE-2021-33793
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document conversion...
CVE-2019-20823
An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs...
CVE-2019-20816
An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference during the parsing of file data...
CVE-2019-20825
An issue was discovered in Foxit PhantomPDF before 8.3.11. It has an out-of-bounds write when Internet Explorer is used...
CVE-2019-20834
An issue was discovered in Foxit PhantomPDF before 8.3.10. It allows signature validation bypass via a modified file or a file with non-standard signatures...
CVE-2019-20830
An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has an out-of-bounds write when Internet Explorer is used...
CVE-2019-20821
An issue was discovered in Foxit PhantomPDF Mac before 3.4. It has a NULL pointer dereference...
CVE-2019-20829
An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a NULL pointer dereference via FXSYSwcslen in an Epub file...