CVE-2020-17434

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-17434

CVE-2020-17434 concerns Foxit Studio Photo versions affected by an ARW file parsing flaw. The issue arises from insufficient validation of user-supplied data, causing a read past the end of an allocated structure and leading to information disclosure. Several connected sources (including ZDI advi...