9 matches found
CVE-2022-25641
Affected software : Foxit PDF Reader < 11.2.2, Foxit PDF Editor < 11.2.2, and PhantomPDF
CVE-2021-41783
CVE-2021-41783 affects Foxit PDF Reader before 11.1, Foxit PDF Editor before 11.1, and PhantomPDF before 10.1.6. The root cause is a use-after-free triggered by mishandling JavaScript, enabling attackers to potentially execute arbitrary code. The CVSS details in the initial document show a local ...
CVE-2021-41782
CVE-2021-41782 affects Foxit PDF Reader before 11.1, PDF Editor before 11.1, and PhantomPDF before 10.1.6. The issue is a use-after-free caused by mishandling JavaScript, enabling attackers to trigger memory corruption and execute arbitrary code. Public disclosures in the provided documents corro...
CVE-2021-41785
CVE-2021-41785 affects Foxit PDF Reader prior to 11.1, Foxit PDF Editor prior to 11.1, and Foxit PhantomPDF prior to 10.1.6. The issue is a use-after-free caused by mishandling JavaScript, leading to arbitrary code execution. The vulnerability affects multiple Foxit products as described in publi...
CVE-2021-41784
CVE-2021-41784 affects Foxit PDF Reader before 11.1, Foxit PDF Editor before 11.1, and PhantomPDF before 10.1.6. The issue is a use-after-free caused by mishandling of JavaScript, enabling attackers to trigger arbitrary code execution. The vulnerability is listed with LOCAL attack Vector and requ...
CVE-2021-41780
CVE-2021-41780 affects Foxit PDF Reader < 11.1, Foxit PDF Editor < 11.1, and Foxit PhantomPDF
CVE-2021-41781
CVE-2021-41781 affects Foxit PDF Reader < 11.1, Foxit PDF Editor < 11.1, and PhantomPDF
CVE-2021-40326
CVE-2021-40326 affects Foxit PDF Reader before 11.1, Foxit PDF Editor before 11.1, and Foxit PhantomPDF before 10.1.6. The flaw stems from mishandling hidden and incremental data in digitally signed PDFs, enabling an attacker to write to an arbitrary file and display controlled contents during si...
CVE-2021-27517
The CVE-2021-27517 issue affects Foxit PDF SDK for Web (up to version 7.5.0). The root cause is the handling of PDFs containing embedded Acrobat JavaScript (specifically app.alert), which enables Cross-Site Scripting (XSS) in the browser when a victim uploads a malicious PDF. The documents consis...