PT-2020-13693

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.2 PhantomPDF versions prior to 9.7.2 Description An issue allows resource consumption via long strings in the content stream. Recommendations For Foxit Reader versions prior to 9.7.2, update to version 9.7.2 ...

PT-2020-10782

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7 Description An issue allows memory consumption because data is created for each page at the application level. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.7, update to...

PT-2020-13690

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.2 PhantomPDF versions prior to 9.7.2 Description The issue is related to a use-after-free error caused by JavaScript execution after a deletion or close operation. Recommendations For Foxit Reader versions...

PT-2020-8881

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.7 Description The issue allows NTLM credential theft via a GoToE or GoToR action. Recommendations For Foxit PhantomPDF versions prior to 8.3.7, update to version 8.3.7 or later to resolve the issue...

PT-2020-13691

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.2 PhantomPDF versions prior to 9.7.2 Description The issue is related to circular reference mishandling, which causes a loop. Recommendations For Foxit Reader versions prior to 9.7.2, update to version 9.7.2 ...

PT-2020-13689

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.2 PhantomPDF versions prior to 9.7.2 Description The issue is related to brute-force attack mishandling due to the CAS service lacking a limit on login failures. Recommendations For Foxit Reader versions prio...

PT-2020-10786

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7.0.29430 Description An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF. It has an out-of-bounds write via incorrect image data. Recommendations For versions prior to...

PT-2020-10789

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.11 Description An issue was discovered that results in an out-of-bounds write when Internet Explorer is used. Recommendations For versions prior to 8.3.11, update to version 8.3.11 or later to resolve the...

PT-2020-10784

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7 PhantomPDF versions prior to 9.7 Description The issue is related to a NULL pointer dereference that occurs during the parsing of file data. This indicates a problem with how the software handles certain file...

PT-2020-8888

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.6 Description The issue allows arbitrary application execution via an embedded executable file in a PDF portfolio. Recommendations For Foxit PhantomPDF versions prior to 8.3.6, update to version 8.3.6 or...

PT-2020-8883

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.2 PhantomPDF versions prior to 9.2 Description An issue was discovered that allows NTLM credential theft via a GoToE or GoToR action. Recommendations For Foxit Reader versions prior to 9.2, update to version 9....

PT-2020-8885

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.6 Description An issue was discovered in Foxit PhantomPDF that allows a DLL to execute remote code due to an untrusted search path. Recommendations For versions prior to 8.3.6, update to version 8.3.6 or...

PT-2020-8886

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.6 Description An issue in Foxit PhantomPDF allows Remote Code Execution via a GoToE or GoToR action. Recommendations For versions prior to 8.3.6, update to version 8.3.6 or later to resolve the issue...

PT-2020-8882

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.7 Description An issue in Foxit PhantomPDF allows memory consumption via an ArrayBuffer0xfffffffe call. Recommendations For Foxit PhantomPDF versions prior to 8.3.7, update to version 8.3.7 or later to...

PT-2020-8884

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.2 PhantomPDF versions prior to 9.2 Description An issue was discovered that allows memory consumption via an ArrayBuffer0xfffffffe call. Recommendations For Foxit Reader versions prior to 9.2, update to version...

PT-2020-10781

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7 Description An issue was discovered that results in a NULL pointer dereference. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.7, update to version 9.7 or later to resolve...

PT-2020-10777

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.12 Description An issue was discovered that results in a NULL pointer dereference. Recommendations For versions prior to 8.3.12, update to version 8.3.12 or later to resolve the issue...

PT-2020-10783

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7 Description An issue was discovered that allows stack consumption via nested function calls for XML parsing. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.7, update to...

PT-2020-10779

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.12 Description An issue in the XML parsing functionality allows stack consumption via nested function calls. Recommendations For versions prior to 8.3.12, update to version 8.3.12 or later to resolve the...

PT-2020-10795

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.5.0.20733 Description An issue was discovered in the 3D Plugin Beta, causing a crash due to void data mishandling. Recommendations For versions prior to 9.5.0.20733, update to version 9.5.0.20733...