CVE-2018-14442

Foxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free vulnerability that leads to Remote Code Execution. The connected documents consistently identify a memory misreference/UAF as the root cause and confirm impact as RCE. No exploit details or in-the-wild status are provided. Re...

CVE-2019-6766

CVE-2019-6766 affects Foxit Reader 9.4.1.16828. The flaw is in removeField for AcroForms, caused by not validating the existence of the target object before operations. This enables remote information disclosure; exploitation requires user interaction (visiting a malicious page or opening a malic...

CVE-2021-27261

CVE-2021-27261 affects Foxit PhantomPDF (v10.1.0.37527) and is caused by improper validation in the handling of PDF U3D objects, leading to an out-of-bounds read and remote code execution. The vulnerability allows an attacker to run arbitrary code in the context of the current process when a user...

CVE-2021-38569

Foxit Reader and Foxit PhantomPDF are affected by a vulnerability fixed in 10.1.4 or later. The issue allows stack consumption via recursive function calls during handling of XFA forms or linked objects, which could lead to a denial of service. Affected products are Foxit Reader and Foxit Phantom...

CVE-2017-10944

Foxit Reader 8.3.0.14878 and earlier is affected by CVE-2017-10944 due to an out-of-bounds read in the ObjStm object parsing. The flaw stems from improper validation of input data, enabling an information disclosure vulnerability when a user opens a malicious PDF or visits a crafted page; exploit...

CVE-2017-17557

CVE-2017-17557: Foxit Reader < 9.1 and Foxit PhantomPDF

CVE-2019-6759

CVE-2019-6759 affects Foxit Reader (Windows) with the flaw located in the ConvertToPDF_x86.dll. The issue stems from insufficient validation of user-supplied data, allowing a write past the end of an allocated object in ConvertToPDF_x86.dll and enabling arbitrary code execution in the context of ...

CVE-2023-38573

Foxit Reader (and Foxit PDF Editor) is affected by CVE-2023-38573: a use-after-free vulnerability in how the signature field is handled in Foxit Reader 12.1.2.15356. A specially crafted JavaScript in a malicious PDF can trigger reuse of a freed object, causing memory corruption and potentially ar...

CVE-2017-10941

Foxit Reader/Phantom versions up to 8.3.0.14878 (and earlier) are affected by CVE-2017-10941 and related CVEs. The root cause is a use-after-free in AFParseDateEx due to failing to validate object existence before operations, enabling remote code execution under the process context. Exploitation ...

CVE-2017-10951

CVE-2017-10951 affects Foxit Reader 8.x (e.g., 8.3.0.14878) and Foxit PhantomPDF prior to 8.3.2. The vulnerability arises from improper validation of a user-supplied string used in the app.launchURL JavaScript call, enabling an attacker to execute arbitrary code under the current process context....

CVE-2018-11619

CVE-2018-11619 affects Foxit Reader. The vulnerability lies in the handling of the setFocus method where an object’s existence is not validated before operations, enabling a remote attacker to execute arbitrary code in the context of the current process. Exploitation requires user interaction (vi...

CVE-2018-14258

Foxit Reader (Windows) is affected by CVE-2018-14258 due to a type confusion in getPageNthWord, allowing remote code execution when a user opens a malicious page/file or otherwise interacts with crafted content. The flaw exists in Foxit Reader 9.0.1.1049 and, per advisories, affects versions olde...

CVE-2019-6772

Foxit Reader (version 2019.010.20098) is affected by CVE-2019-6772 via the removeField method in AcroForms, where the code fails to validate object existence before operations. This can lead to information disclosure and, when combined with other vulnerabilities, potential code execution in the p...

CVE-2021-31455

CVE-2021-31455 affects Foxit Reader 10.1.1.37576 (and related versions) via improper validation when handling XFA forms, failing to verify object existence before operations. This allows a low-privilege attacker to execute arbitrary code in the current process after the user visits a malicious pa...

CVE-2015-8580

CVE-2015-8580 affects Foxit Reader and Foxit PhantomPDF prior to version 7.2.2. The vulnerabilities are use-after-free in the Print method and in App object handling, enabling remote code execution via a crafted PDF document. Remediation is to upgrade to Foxit Reader/PhantomPDF 7.2.2 or later. Av...

CVE-2017-16584

Foxit Reader 8.3.2.25013 contains a vulnerability in util.printf that allows read past the end of an allocated object, enabling information disclosure. Exploitation requires user interaction (e.g., visiting a malicious page or opening a malicious file) and can be combined with other flaws to exec...

CVE-2018-14248

CVE-2018-14248 affects Foxit Reader (FXR) with a vulnerability in the exportAsXFDF method that can trigger a type-confusion condition and lead to remote Code Execution. The issue requires user interaction (visiting a malicious page or opening a malicious file) and is documented in advisories such...

CVE-2018-14292

CVE-2018-14292 affects Foxit Reader (e.g., 9.0.1.5096 and older) where a vulnerability in PDF parsing can cause a use-after-free in document element handling, enabling remote code execution in the current process. Exploitation requires user interaction (target must open a malicious page or file)....

CVE-2019-6757

CVE-2019-6757 affects Foxit Reader 9.4.16811. The flaw is in ConvertToPDF_x86.dll and stems from not validating the existence of an object before performing operations, enabling remote code execution after user interaction (visit a malicious page or open a malicious file). The current process con...

CVE-2019-6760

Foxit Reader 9.4.16811 is affected by CVE-2019-6760 due to an out-of-bounds write in ConvertToPDF_x86.dll caused by insufficient validation of user-supplied data. This allows remote attackers to execute arbitrary code, with user interaction required (the target must visit a malicious page or open...

CVE-2020-13560

CVE-2020-13560 affects Foxit PDF Reader (example: version 10.1.0.37527) and is a use-after-free in the JavaScript engine. A specially crafted PDF can trigger reuse of freed memory, enabling arbitrary code execution. User interaction is required (opening the malicious file). If the browser plugin ...

CVE-2021-27264

CVE-2021-27264 affects Foxit PhantomPDF 10.1.0.37527. The vulnerability stems from improper validation in the handling of embedded U3D objects within PDF files, leading to an out-of-bounds read (read past end of an allocated object). This can allow a remote attacker who entices a user to view a m...

CVE-2021-38570

CVE-2021-38570 affects Foxit Reader and Foxit PhantomPDF versions prior to 10.1.4. The issue allows an attacker to delete arbitrary files during uninstallation by abusing a symlink, enabling file deletion on the user’s system. Exploitation details are not provided in the supplied documents. The v...

CVE-2015-2789

Summary : CVE-2015-2789 is an unquoted Windows search path vulnerability in Foxit Reader’s Cloud plugin (Foxit Cloud Safe Update Service) affecting Foxit Reader 6.1–7.0.6.1126. This local privilege-escalation flaw can allow a non-privileged, local attacker to gain elevated privileges via a Trojan...

CVE-2017-14823

CVE-2017-14823 affects Foxit Reader 8.3.1.21155. The flaw is in the signer method of XFA’s Signature objects, caused by inadequate validation, leading to a type confusion that enables remote code execution in the context of the current process. Exploitation requires user interaction (visiting a m...

CVE-2017-14830

CVE-2017-14830 affects Foxit Reader 8.3.1.21155. The flaw is in the XFAScriptObject.setFocus method, caused by improper validation of user-supplied data, leading to a type confusion condition and remote code execution when a user visits a malicious page or opens a malicious file. Exploitation det...

CVE-2018-10483

Foxit Reader 9.0.0.29935 is affected by CVE-2018-10483. The issue occurs in the parsing of U3D Clod Progressive Mesh objects and results from improper validation of user-supplied data, causing a write past the end of an allocated object . This enables remote code execution in the context of the c...

CVE-2023-39542

CVE-2023-39542 describes a code execution vulnerability in the Javascript saveAs API of Foxit Reader 12.1.3.15356. A specially crafted malformed file can create arbitrary files, potentially leading to remote code execution. An attacker must trick the user into opening the malicious file, and expl...

CVE-2017-16576

CVE-2017-16576 affects Foxit Reader, notably versions around 8.3.1.21155 (and related 8.3.x lines). The root cause is in the XFA field element where the code fails to validate object existence before operating on it, enabling remote code execution when a user opens a malicious page or file and in...

CVE-2019-6758

Foxit Reader 9.4.16811 is affected by CVE-2019-6758 due to a flaw in ConvertToPDF_x86.dll where the code does not validate the existence of an object before performing operations. This enables information disclosure with user interaction (visiting a malicious page or opening a malicious file) and...

CVE-2019-6762

CVE-2019-6762 affects Foxit PhantomPDF 9.4.1.16828. The flaw occurs in the HTML-to-PDF conversion where the code fails to validate the existence of an object before performing operations, enabling remote code execution in the context of the current process. User interaction is required (visiting ...

CVE-2021-31452

Foxit Reader 10.1.1.37576 and earlier is affected by a remote code execution vulnerability in the handling of XFA forms. The issue stems from insufficient validation of user-supplied data, leading to a write past the end of an allocated data structure and enabling code execution in the attacker’s...

CVE-2018-14243

CVE-2018-14243 concerns Foxit Reader. Multiple connected sources (ZDI-18-703, CNVD-2018-14462, OpenVAS entry) describe a type confusion vulnerability in the addPageOpenJSMessage method that allows remote code execution when a user opens a malicious page/file and executes JavaScript. Affected prod...

CVE-2018-14250

CVE-2018-14250 affects Foxit Reader (and Foxit PhantomPDF) with a getAnnot type-confusion vulnerability that allows remote code execution. Root cause: type confusion in getAnnot triggered by JavaScript actions, requiring user interaction (visiting a malicious page or opening a malicious file). Ex...

CVE-2018-14302

CVE-2018-14302 affects Foxit Reader (Windows) via a remote code execution vulnerability in Square annotations. The flaw is an use-after-free in processing of annotations that can be triggered when a user visits a malicious page or opens a malicious file, enabling arbitrary code execution in the c...

CVE-2018-14304

Foxit Reader vulnerable to a Use-After-Free in the Text annotation handling that can allow remote code execution. Affected products include Foxit Reader prior to version 9.2.0.9097 (and Foxit PhantomPDF), with exploitation requiring user interaction (visiting a malicious page or opening a crafted...

CVE-2021-27270

CVE-2021-27270 affects Foxit PhantomPDF 10.1.0.37527. The flaw lies in JPEG2000 image parsing where improper validation can cause a read past the end of an allocated structure, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a...

CVE-2009-0690

The CVE-2009-0690 issue affects Foxit Reader's JPEG2000/JBIG Decoder add-on prior to 2.0.2009.616. A negative stream offset in a JPEG2000 (JPX) stream can trigger an out-of-bounds read, enabling a remote attacker to cause memory corruption, DoS, and potentially execute arbitrary code via a crafte...

CVE-2018-14252

Foxit Reader 9.0.1.1049 is affected by CVE-2018-14252 due to a type confusion in getField. Exploitation requires user interaction (visiting a malicious page or opening a malicious file) and can lead to remote arbitrary code execution in the current process. Connected advisories (ZDI-18-712, CNVD-...

CVE-2018-14260

Foxit Reader CVE-2018-14260 is a type-confusion remote code execution in getPageRotation that affects Foxit Reader 9.0.1.1049. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The flaw lets an attacker execute code in the current process context via ...

CVE-2018-14317

Foxit Reader 9.1.0.5096 is affected by a PDF processing type-confusion vulnerability that enables remote code execution when a user opens a malicious page/file. Root cause is improper validation of user-supplied data during PDF handling, allowing an attacker to execute code in the current process...

CVE-2019-6767

CVE-2019-6767 affects Foxit Reader 9.4.1.16828. The flaw is in the removeField processing of AcroForms , where the code fails to validate an object’s existence before performing operations, enabling remote code execution . Exploitation requires user interaction (visiting a malicious page or openi...

CVE-2010-1239

Foxit Reader vulnerable to arbitrary code execution via crafted PDFs (two launch-action vectors). Affected: Foxit Reader before 3.2.1.0401. Root cause: PDF Open/Launch actions not properly restricted, enabling remote execution of programs (local or embedded). Impact: remote attacker could run arb...

CVE-2012-4337

Foxit Reader is affected: pre-5.3 on Windows XP/7 allows remote code execution via a crafted PDF that triggers negative-number calculation during cross-reference processing. The root cause is memory corruption during PDF parsing, leading to arbitrary code execution with the caller’s privileges. A...

CVE-2017-10945

Foxit Reader 8.3.0.14878 (and earlier) is affected by CVE-2017-10945 due to a use-after-free in the app.alert function caused by not validating an object before operations. This enables remote code execution with user interaction required (target must open a malicious file/page). Related advisori...

CVE-2017-10946

Foxit Reader CVE-2017-10946 affects Foxit Reader prior to 8.2.1.6871. The flaw is in the setItem function, caused by not validating the existence of an object before operating on it, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a mal...

CVE-2018-14281

Foxit Reader vulnerability CVE-2018-14281 involves the exportData XFA function where improper validation of user-supplied data allows writing arbitrary files, enabling remote code execution under the process context. The issue requires user interaction (visiting a malicious page or opening a mali...

CVE-2018-3842

CVE-2018-3842 affects Foxit PDF Reader (and related Foxit PDF components) with an exploitable use of an uninitialized pointer in the JavaScript engine. A specially crafted PDF can lead to dereference of uninitialized memory, enabling arbitrary code execution when the user opens the file; attack s...

CVE-2019-6756

CVE-2019-6756 affects Foxit PhantomPDF (version 9.4.0.16811) and Foxit Reader/PhantomPDF family in several disclosures. Description across sources indicates a vulnerability in the parsing of HTML files where the code fails to validate an object’s existence before performing operations on it. This...

CVE-2019-6768

CVE-2019-6768 affects Foxit Reader 9.4.1.16828 (Windows). The vulnerability resides in the removeField method when processing AcroForms, caused by not validating the existence of an object before performing operations, enabling remote code execution. User interaction is required (target must visi...