CVE-2020-15638: Access of Resource Using Incompatible Type

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.2.29539. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PhantomPDF < 3.4 DoS (macOS)

The version of Foxit PhantomPDF installed on the remote macOS host is prior to 3.4. It is, therefore, affected by a denial of service DoS vulnerability due to a null pointer dereference. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Foxit PhantomPDF < 4.0 Privilege Escalation (macOS)

The version of Foxit PhantomPDF installed on the remote macOS host is prior to 4.0. It is, therefore, affected by a Signature Validation Bypass vulnerability that delivers incorrect validation results when validating certain PDF files that have been modified maliciously or contains non-standard...

Foxit PhantomPDF SetLocalDescription Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PhantomPDF JSCreate Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PhantomPDF < 10.0.1 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 10.0.1. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's...

Foxit PhantomPDF Cloud Credentials Mishandling Vulnerability

PhantomPDF is a Chinese Foxit Foxit company for enterprise-level users of PDF document processing software. A cloud credential mishandling vulnerability exists in Foxit PhantomPDF versions prior to 8.3.10. An attacker could exploit this vulnerability to access documents on Google Drive...

Foxit PhantomPDF Mac and Reader for Mac Code Issues Vulnerabilities

Foxit PhantomPDF Mac and Foxit Reader for Mac are both China Foxit Foxit company's a macOS-based PDF document reader. A code issue vulnerability exists in Foxit PhantomPDF Mac versions prior to 3.3 and Reader for Mac versions prior to 3.3. The vulnerability stems from an improperly designed or...

Foxit PhantomPDF Mishandling of Homonyms Vulnerability

PhantomPDF is a Chinese Foxit Foxit company for enterprise-level users of PDF document processing software. A vulnerability exists in Foxit PhantomPDF versions prior to 8.3.10 due to improper handling of homonyms. An attacker can exploit this vulnerability to cause an impact on the integrity of...

Foxit Reader and PhantomPDF Resource Management Error Vulnerability (CNVD-2020-32092)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader versions prior to 9.7 and PhantomPDF versions prior to 9.7. An attacker can exploit this vulnerability to exhaust the stack crash...

Foxit Reader and PhantomPDF Information Disclosure Vulnerability (CNVD-2020-32457)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader versions prior to 9.5 and PhantomPDF versions prior to 9.5, which stems from the program not properly handling cloud credentials. An attacker could exploit...

Foxit Reader and PhantomPDF Buffer Overflow Vulnerability (CNVD-2020-32453)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A buffer overflow vulnerability exists in Foxit Reader versions prior to 9.6 and PhantomPDF versions prior to 9.6. The vulnerability originates when a networked system or product performs an operation in...

Foxit PhantomPDF NTLM Credential Stealing Vulnerability

Foxit PhantomPDF is China Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit PhantomPDF versions prior to 8.3.7. The vulnerability can be exploited to obtain NTLM credentials through GoToE or GoToR operations...

Foxit PhantomPDF Mac Code Issues Vulnerabilities

Foxit PhantomPDF Mac is China Foxit Foxit company's a macOS-based PDF document reader. A code issue vulnerability exists in Foxit PhantomPDF Mac versions prior to 3.4. The vulnerability stems from an improperly designed or implemented problem in the code development process of a networked system ...

Foxit Reader and PhantomPDF code issue vulnerability (CNVD-2020-32437)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A code issue vulnerability exists in Foxit Reader versions prior to 9.7 and PhantomPDF versions prior to 9.7. An attacker could exploit this vulnerability to cause a denial of service...

Foxit Reader and PhantomPDF Resource Management Error Vulnerability (CNVD-2020-32464)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader versions prior to 9.2 and PhantomPDF versions prior to 9.2. An attacker could exploit this vulnerability to cause the application to crash...

Foxit Reader and PhantomPDF Buffer Overflow Vulnerability (CNVD-2020-32451)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A buffer overflow vulnerability exists in Foxit Reader prior to version 9.6 and PhantomPDF prior to version 9.6. An attacker could exploit this vulnerability to cause the application to crash...

Foxit Reader and PhantomPDF Code Issues Vulnerabilities

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A code issue vulnerability exists in Foxit Reader versions prior to 9.7 and PhantomPDF versions prior to 9.7. An attacker could exploit this vulnerability to cause a denial of service...

Unspecified Vulnerability in Foxit Reader and PhantomPDF (CNVD-2020-32081)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in the CAS service in Foxit Reader prior to version 9.7.2 and PhantomPDF prior to version 9.7.2, which stems from the program not limiting the number of failed login...

Unspecified Vulnerability in Foxit Reader and PhantomPDF (CNVD-2020-32463)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader prior to version 9.2 and PhantomPDF prior to version 9.2. The vulnerability can be exploited to obtain NTLM credentials through GoToE or GoToR operations...