CVE-2019-20829: NULL Pointer Dereference

An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a NULL pointer dereference via FXSYSwcslen in an Epub file...

CVE-2019-20831: Undefined Security Weakness

An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.5.0.20733. It has void data mishandling, causing a crash...

CVE-2019-20833: Improper Authentication

An issue was discovered in Foxit PhantomPDF before 8.3.10. It has mishandling of cloud credentials, as demonstrated by Google Drive...

CVE-2019-20835: Undefined Security Weakness

An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has homograph mishandling...

CVE-2019-20836: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has mishandling of cloud credentials, as demonstrated by Google Drive...

CVE-2018-21238: Uncontrolled Resource Consumption

An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows memory consumption via an ArrayBuffer0xfffffffe call...

CVE-2018-21239: Insufficiently Protected Credentials

An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows NTLM credential theft via a GoToE or GoToR action...

CVE-2018-21240: Uncontrolled Resource Consumption

An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows memory consumption via an ArrayBuffer0xfffffffe call...

CVE-2018-21243: Unrestricted Upload of File with Dangerous Type

An issue was discovered in Foxit PhantomPDF before 8.3.6. It has COM object mishandling when Microsoft Word is used...

CVE-2019-20821: NULL Pointer Dereference

An issue was discovered in Foxit PhantomPDF Mac before 3.4. It has a NULL pointer dereference...

CVE-2019-20819: Uncontrolled Recursion

An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows stack consumption via nested function calls for XML parsing...

CVE-2019-20818: Allocation of Resources Without Limits or Throttling

An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows memory consumption because data is created for each page of an application level...

CVE-2019-20816: NULL Pointer Dereference

An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference during the parsing of file data...

CVE-2019-20814: Allocation of Resources Without Limits or Throttling

An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows memory consumption because data is created for each page of an application level...

CVE-2020-13815: Uncontrolled Resource Consumption

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It allows stack consumption via a loop of an indirect object reference...

CVE-2020-13810: Improper Verification of Cryptographic Signature

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows signature validation bypass via a modified file or a file with non-standard signatures...

CVE-2020-13808: Loop with Unreachable Exit Condition

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via crafted cross-reference stream data...

CVE-2020-13804: Use of Hard-coded Credentials

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows information disclosure of a hardcoded username and password in the DocuSign plugin...

CVE-2019-20823: Buffer Copy without Checking Size of Input

An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs...

PT-2020-13691

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.2 PhantomPDF versions prior to 9.7.2 Description The issue is related to circular reference mishandling, which causes a loop. Recommendations For Foxit Reader versions prior to 9.7.2, update to version 9.7.2 ...