Lucene search
+L

699 matches found

Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:00 a.m.31 views

Foxit Reader XFA Lower Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...

7.8CVSS0.8AI score0.03918EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:00 a.m.36 views

Foxit Reader XFA TimeField setAttribute Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7.8CVSS1.9AI score0.03918EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:00 a.m.38 views

Foxit Reader XFA TimeField fillColor Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7.8CVSS1.9AI score0.03918EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:00 a.m.38 views

Foxit Reader XFA TimeField boundItem Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7.8CVSS1.9AI score0.03918EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:00 a.m.33 views

Foxit Reader XFA host beep Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7.8CVSS1.5AI score0.03918EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/11 12:00 a.m.38 views

Foxit Reader XFA getAttribute Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7.8CVSS2AI score0.03918EPSS
SaveExploits0References1
Check Point Advisories
Check Point Advisories
added 2018/10/07 12:00 a.m.47 views

Foxit Reader JavaScript XFA Use After Free (CVE-2018-3850)

A use after free vulnerability exists in Foxit Reader. This vulnerability is due to improper handling of freed JavaScript XML Forms Architecture objects...

6.8CVSS0.6AI score0.02812EPSS
SaveExploits1
Zero Day Initiative
Zero Day Initiative
added 2018/10/03 12:00 a.m.25 views

Adobe Acrobat Pro DC XFA Template Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...

9.3CVSS2.1AI score0.04764EPSS
SaveExploits0References1
OSV
OSV
added 2018/07/31 8:29 p.m.7 views

CVE-2018-14311

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...

8.8CVSS6.2AI score0.02773EPSS
SaveExploits0References2
NVD
NVD
added 2018/07/31 8:29 p.m.22 views

CVE-2018-14311

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...

8.8CVSS8.7AI score0.02773EPSS
SaveExploits0References2
OSV
OSV
added 2018/07/31 8:29 p.m.7 views

CVE-2018-14280

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.2AI score0.02773EPSS
SaveExploits0References2
NVD
NVD
added 2018/07/31 8:29 p.m.28 views

CVE-2018-14281

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS8.8AI score0.02773EPSS
SaveExploits0References2
OSV
OSV
added 2018/07/31 8:29 p.m.7 views

CVE-2018-14281

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.2AI score0.02773EPSS
SaveExploits0References2
Prion
Prion
added 2018/07/31 8:29 p.m.24 views

Type confusion

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...

6.8CVSS8.8AI score0.02773EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2018/07/31 8:00 p.m.69 views

CVE-2018-14311

CVE-2018-14311 affects Foxit Reader (and Foxit PhantomPDF) via a type confusion in XFA event handling. The flaw arises from improper validation of user-supplied data, enabling remote code execution when a user opens a malicious file or visits a crafted page. Exploitation requires user interaction...

8.8CVSS8.8AI score0.02773EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2018/07/31 8:00 p.m.36 views

CVE-2018-14311

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...

8.8AI score0.02773EPSS
SaveExploits0References2
CNVD
CNVD
added 2018/07/25 12:00 a.m.12 views

Foxit Reader ExpaseFDF Arbitrary File Writing Remote Code Execution Vulnerability

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A security vulnerability exists in the 'exportAsFDF XFA' function in Foxit Reader 9.1.0.5096 and earlier versions for Windows based platforms, which stems from the program not...

8.8CVSS8.8AI score0.02773EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/07/24 12:00 a.m.10 views

Foxit Reader Type Obfuscation Vulnerability (CNVD-2018-14449)

Foxit Reader is a PDF document reader from China's Foxit Software Corporation.Foxit PhantomPDF is a commercial version. A type confusion vulnerability exists in the handling of XFA events in Foxit Reader, which stems from the program failing to properly validate user-submitted data. A remote...

8.8CVSS8.9AI score0.02773EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/07/19 12:00 a.m.32 views

Foxit Reader exportAsFDF Arbitrary File Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the exportAsFDF XFA...

8.8CVSS2.5AI score0.02773EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/07/19 12:00 a.m.30 views

Foxit Reader XFA Event Handling Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...

8.8CVSS2.2AI score0.02773EPSS
SaveExploits0References1
Rows per page
Query Builder