CVE-2021-45978

Foxit PDF Reader and PDF Editor for macOS is affected in versions before 11.1. The root cause is misuse of the XFA API via xfa.host.gotoURL in the XFA implementation, enabling arbitrary code execution. CVSS details in sources indicate high impact (C/H/I/H; LOCAL exploit with UI requirement per CV...

CVE-2021-45978: Improper Neutralization of Special Elements used in an OS Command

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via xfa.host.gotoURL in the XFA API...

PT-2022-12479

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader and PDF Editor versions prior to 11.1 Description The issue allows remote attackers to execute arbitrary code via xfa.host.gotoURL in the XFA API. This can be exploited by attackers to gain unauthorized access and control over...

Foxit PhantomPDF < 8.3.2 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 8.3.2. It is, therefore, affected by multiple vulnerabilities: - A flaw exists in the app.launchURL method allowing a context-dependent attacker to potentially...

Foxit Reader command injection(CVE-2017-10951)and file writing Vulnerability(CVE-2017-10952)

A tale about Foxit Reader - Safe Reading mode and other vulnerabilities Some days ago someone send me the following link, which describes two vulnerabilities in Foxit Reader: http://thehackernews.com/2017/08/two-critical-zero-day-flaws-disclosed.html These two vulnerabilities are similar to the...