PT-2020-10798

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.10 Description An issue allows signature validation bypass via a modified file or a file with non-standard signatures. Recommendations For Foxit PhantomPDF versions prior to 8.3.10, update to version 8.3....

PT-2020-10797

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.10 Description The issue concerns the mishandling of cloud credentials, specifically demonstrated with Google Drive. Recommendations For versions prior to 8.3.10, update to version 8.3.10 or later to...

PT-2020-10791

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF Mac version 3.3 Foxit Reader for Mac versions prior to 3.3 Description An issue was discovered that allows stack consumption due to interaction between ICC-Based color space and Alternate color space. Recommendations For Foxit...

PT-2020-10785

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF Mac versions prior to 3.4 Description An issue was discovered that results in a NULL pointer dereference. Recommendations For versions prior to 3.4, update to version 3.4 or later to resolve the issue...

PT-2020-10796

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.10 Description An issue was discovered in Foxit PhantomPDF related to homograph mishandling. Recommendations For versions prior to 8.3.10, update to version 8.3.10 or later to resolve the issue...

PT-2020-10800

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.5 Foxit PhantomPDF versions prior to 9.5 Description The issue concerns the mishandling of cloud credentials, specifically demonstrated with Google Drive. Recommendations For Foxit Reader versions prior to 9.5,...

PT-2020-10792

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.6 Description A buffer overflow issue was discovered due to a looping correction not occurring after JavaScript updates Field APs. Recommendations For Foxit Reader and PhantomPDF versions prior t...

PT-2020-10793

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.6 Description An issue was discovered that leads to a NULL pointer dereference via FXSYS wcslen when processing an Epub file. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.6...

PT-2020-10790

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF Mac version 3.3 Foxit Reader for Mac versions prior to 3.3 Description An issue was discovered that results in a NULL pointer dereference. Recommendations For Foxit PhantomPDF Mac version 3.3, update to a version that contains...

PT-2020-10787

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.11 Description A buffer overflow issue exists due to a looping correction not occurring after JavaScript updates Field APs. Recommendations For versions prior to 8.3.11, update to version 8.3.11 or later ...

PT-2020-10799

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.5 Foxit PhantomPDF versions prior to 9.5 Description An issue was discovered that involves homograph mishandling. Recommendations For Foxit Reader versions prior to 9.5, update to version 9.5 or later. For Foxi...

PT-2020-10794

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.6 Foxit PhantomPDF versions prior to 9.6 Description An issue was discovered that results in an out-of-bounds write when Internet Explorer is used. Recommendations For Foxit Reader versions prior to 9.6, update...

PT-2020-13698

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.1 PhantomPDF versions prior to 9.7.1 Description The issue is related to a use-after-free error that occurs when processing a document that lacks a dictionary. Recommendations For Foxit Reader versions prior ...

PT-2020-13687

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF Mac versions prior to 4.0 Foxit Reader for Mac versions prior to 4.0 Description The issue allows signature validation bypass via a modified file or a file with non-standard signatures. Recommendations For Foxit PhantomPDF Mac...

PT-2020-13694

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7.2 Description The issue allows signature validation bypass via a modified file or a file with non-standard signatures. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.7.2,...

PT-2020-13692

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.7.2 Description An issue allows resource consumption via crafted cross-reference stream data. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.7.2, update to version 9.7.2 or...

PT-2020-8887

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.6 Description An issue was discovered in Foxit PhantomPDF. It has COM object mishandling when Microsoft Word is used. Recommendations For Foxit PhantomPDF versions prior to 8.3.6, update to version 8.3.6 ...

PT-2020-10788

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.11 Description An issue was discovered in Foxit PhantomPDF. It has a NULL pointer dereference via FXSYS wcslen in an Epub file. Recommendations For versions prior to 8.3.11, update to version 8.3.11 or...

CVE-2020-13805: Improper Restriction of Excessive Authentication Attempts

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack mishandling because the CAS service lacks a limit on login failures...

CVE-2020-13803: Improper Verification of Cryptographic Signature

An issue was discovered in Foxit PhantomPDF Mac and Foxit Reader for Mac before 4.0. It allows signature validation bypass via a modified file or a file with non-standard signatures...