2460 matches found
CVE-2020-13806: Use After Free
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has a use-after-free because of JavaScript execution after a deletion or close operation...
CVE-2019-20826: NULL Pointer Dereference
An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It has a NULL pointer dereference...
CVE-2019-20827: Out-of-bounds Write
An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It allows stack consumption because of interaction between ICC-Based color space and Alternate color space...
CVE-2019-20828: Buffer Copy without Checking Size of Input
An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs...
CVE-2019-20830: Out-of-bounds Write
An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has an out-of-bounds write when Internet Explorer is used...
CVE-2019-20832: Undefined Security Weakness
An issue was discovered in Foxit PhantomPDF before 8.3.10. It has homograph mishandling...
CVE-2019-20834: Improper Verification of Cryptographic Signature
An issue was discovered in Foxit PhantomPDF before 8.3.10. It allows signature validation bypass via a modified file or a file with non-standard signatures...
CVE-2019-20837: Improper Verification of Cryptographic Signature
An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It allows signature validation bypass via a modified file or a file with non-standard signatures...
CVE-2018-21237: Insufficiently Protected Credentials
An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows NTLM credential theft via a GoToE or GoToR action...
CVE-2018-21241: Untrusted Search Path
An issue was discovered in Foxit PhantomPDF before 8.3.6. It has an untrusted search path that allows a DLL to execute remote code...
CVE-2018-21242: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows Remote Code Execution via a GoToE or GoToR action...
CVE-2018-21244: Unrestricted Upload of File with Dangerous Type
An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows arbitrary application execution via an embedded executable file in a PDF portfolio, aka FG-VD-18-029...
CVE-2019-20822: Out-of-bounds Write
An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.7.0.29430. It has an out-of-bounds write via incorrect image data...
CVE-2019-20820: NULL Pointer Dereference
An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference during the parsing of file data...
CVE-2019-20817: NULL Pointer Dereference
An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference...
CVE-2019-20815: Uncontrolled Recursion
An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows stack consumption via nested function calls for XML parsing...
CVE-2019-20813: NULL Pointer Dereference
An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference...
CVE-2020-13814: Use After Free
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It has a use-after-free via a document that lacks a dictionary...