Lucene search
K

8 matches found

Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.2 views

PT-2026-35401

A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and resulting in an arbitrary code execution...

5.5CVSS5.8AI score0.00113EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/08/11 12:0 a.m.3 views

Foxit Reader 安全漏洞

Foxit Reader is a PDF document reader from the Chinese company Foxit. A security vulnerability exists in Foxit Reader versions prior to 10.1.4 and PhantomPDF versions prior to 10.1.4, which stems from the software's incorrect handling of the Tab key during XFA form interactions, resulting in...

9.1CVSS8.2AI score0.01105EPSS
Exploits0References1
CNVD
CNVD
added 2018/04/28 12:0 a.m.3 views

Foxit Reader XFA borderColor Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the handling of the XFA borderColor property. The vulnerability can be exploited to execute arbitrary code due to a lack of validation before performing an operation on an object...

8.8CVSS7.8AI score0.02773EPSS
Exploits0References1
CNVD
CNVD
added 2018/04/28 12:0 a.m.4 views

Foxit Reader XFA layout remote code execution vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the XFA layout element, which can be exploited by an attacker to execute arbitrary code in the current process context due to a lack of proper validation of user-supplied data...

8.8CVSS7.7AI score0.03226EPSS
Exploits0References1
CNVD
CNVD
added 2017/12/21 12:0 a.m.2 views

Foxit Reader XFA Layout object page method remote code execution vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A remote code execution vulnerability exists in the page method of the XFA Layout object in Foxit Reader version 8.3.1.21155, which results from the program failing to properly validate user-submitted data. A remote...

8.8CVSS8.3AI score0.0259EPSS
Exploits0References1
OSV
OSV
added 2017/12/20 2:29 p.m.3 views

CVE-2017-16576

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within XFA's...

8.8CVSS6.1AI score0.0259EPSS
Exploits0References2
OSV
OSV
added 2017/08/11 7:29 p.m.1 views

CVE-2017-11224

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the XFA layout engine. Successful exploitation could lead to arbitrary code execution...

8.8CVSS6AI score0.09204EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2017/04/27 12:0 a.m.3 views

The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud allow attackers to execute arbitrary code.

The vulnerability in the architecture of XML Form Architecture XFA programs for viewing and editing PDF files, such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud, is related to the use of memory after it is freed. Exploiting this vulnerability can...

9.3CVSS7.9AI score0.05122EPSS
Exploits0References3Affected Software2
Rows per page
Query Builder