Adobe Reader DC XFA preOpen Event Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

CVE-2016-4064

Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted remerge call...

CVE-2016-4064

Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted remerge call...

Design/Logic Flaw

Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted remerge call...

CVE-2016-4064

Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted remerge call...

CVE-2016-4064

Foxit Reader and Foxit PhantomPDF (Windows) ≤ 7.3.3 are affected by CVE-2016-4064 due to a use-after-free in the XFA forms handling when a crafted remerge call is processed. This leads to remote code execution with high impact (as described in connected sources). Remediation per the documents: up...

CVE-2016-4064: Improper Access Control

Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted remerge call...

Foxit Reader < 7.3.4 Multiple Vulnerabilities

The version of Foxit Reader installed on the remote Windows host is prior to 7.3.4. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists that is triggered when handling FlateDecode streams. An unauthenticated, remote attacker can exploit this, via a crafted PDF...

Foxit Reader XFA Page prePrint Event Memory Error References Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of the Page prePrint event, which could allow the reuse of a pointer that has already been released in the hanging pointer. An attacker could execute arbitrary code in the...

Foxit Reader XFA preOpen Memory Error Referencing Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of the preOpen event, which could allow the reuse of a pointer that has already been released in the hanging pointer. An attacker could execute arbitrary code in the current...

Foxit Reader XFA Page prePrint Event Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

Foxit Reader XFA remerge Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...

Foxit Reader XFA preOpen Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

PT-2016-5833

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 7.3.4 PhantomPDF versions prior to 7.3.4 Description The issue is related to a use-after-free vulnerability in the XFA forms handling functionality. This allows remote attackers to execute arbitrary code via a...

Foxit Reader XFA FormCalc replace Integer Overflow Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of XFA FormCalc. The constructed replace call triggers an integer overflow. An attacker can exploit this vulnerability to execute arbitrary code in the current process conte...

Foxit Reader XFA FormCalc replace Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...

Foxit PhantomPDF < 7.2 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is affected by multiple vulnerabilities : - A memory overflow condition exists in the PDF creator plugin ConvertToPDFx86.dll when converting a PNG file to a PDF file due to an...

Foxit Reader < 7.2 Multiple Vulnerabilities

The version of Foxit Reader installed on the remote Windows host is prior to 7.2. It is, therefore, affected by multiple vulnerabilities : - A memory overflow condition exists in the PDF creator plugin ConvertToPDFx86.dll when converting a PNG file to a PDF file due to an error that occurs when...

Multiple Foxit Product XFA Forms Processing Memory Corruption Vulnerabilities

Foxit Reader is a compact PDF reader. A memory corruption vulnerability exists in the implementation of multiple Foxit products. An attacker can exploit this vulnerability to execute arbitrary code in the context of the affected application...

Foxit Reader XFA Form Denial of Service Vulnerability While Processing Targets

Foxit Reader is a popular application for working with PDF files. A vulnerability exists in Foxit Reader that allows remote users to send specially crafted XFA forms that, when loaded by the target user, can crash the application or execute arbitrary code...