Latest foxitsoftware reader Vulnerabilities

● CVE-2021-31473
Foxit Reader browseForDoc Out-Of-Bounds Write Remote Code Execution Vulnerability
Foxitsoftware Phantompdf<=9.7.5.29616
Foxitsoftware Phantompdf>=10.0.0.0<=10.1.3.37598
Foxitsoftware Reader<=10.1.3.37598
Microsoft Windows
Foxit Reader
● CVE-2021-31459
Foxit Reader XFA Form Use-After-Free Remote Code Execution Vulnerability
Foxitsoftware Phantompdf<=9.7.5.29616
Foxitsoftware Phantompdf>=10.0.0.0<=10.1.3.37598
Foxitsoftware Reader<=10.1.3.37598
Microsoft Windows
Foxit Reader
● CVE-2021-31458
Foxit Reader Annotation Use-After-Free Remote Code Execution Vulnerability
Foxitsoftware Phantompdf<=9.7.5.29616
Foxitsoftware Phantompdf>=10.0.0.0<=10.1.37598
Foxitsoftware Reader<=10.1.3.37598
Microsoft Windows
Foxit Reader
● CVE-2021-31460
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the targ...
Foxitsoftware Phantompdf<=9.7.5.29616
Foxitsoftware Phantompdf>=10.0.0.0<=10.1.37598
Foxitsoftware Reader<=10.1.3.37598
Microsoft Windows
● CVE-2021-31461
Foxit Reader app.media Type Confusion Remote Code Execution Vulnerability
Foxitsoftware Phantompdf<=9.7.5.29616
Foxitsoftware Phantompdf>=10.0.0.0<=10.1.3.37598
Foxitsoftware Reader<=10.1.3.37598
Microsoft Windows
Foxit Reader
● CVE-2021-31457
Foxit Reader Annotation Use-After-Free Remote Code Execution Vulnerability
Foxitsoftware Phantompdf<=9.7.5.29616
Foxitsoftware Phantompdf>=10.0.0.0<=10.1.37598
Foxitsoftware Reader<=10.1.3.37598
Microsoft Windows
Foxit Reader
● CVE-2021-31456
Foxit Reader Annotation Use-After-Free Remote Code Execution Vulnerability
Foxitsoftware Phantompdf<=9.7.5.29616
Foxitsoftware Phantompdf>=10.0.0.0<=10.1.37598
Foxitsoftware Reader<=10.1.3.37598
Microsoft Windows
● CVE-2018-20315
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a race condition that can cause a stack-based buffer overflow or an out-of-bounds read.
Foxitsoftware Phantompdf<8.3.10
Foxitsoftware Phantompdf>=9.0<9.5
Foxitsoftware Reader<9.5
● CVE-2018-20314
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCheckLicence race condition that can cause a stack-based buffer overflow or an out-of-bounds read.
Foxitsoftware Phantompdf<8.3.10
Foxitsoftware Phantompdf>=9.0<9.5
Foxitsoftware Reader<9.5
● CVE-2018-20316
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read, a different issue th...
Foxitsoftware Phantompdf<8.3.10
Foxitsoftware Phantompdf>=9.0<9.5
Foxitsoftware Reader<9.5
● CVE-2018-20313
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyPreviewAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read.
Foxitsoftware Phantompdf<8.3.10
Foxitsoftware Phantompdf>=9.0<9.5
Foxitsoftware Reader<9.5
● CVE-2018-20311
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCPDFAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read.
Foxitsoftware Phantompdf<8.3.10
Foxitsoftware Phantompdf>=9.0<9.5
Foxitsoftware Reader<9.5
● CVE-2018-20310
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read.
Foxitsoftware Phantompdf<8.3.10
Foxitsoftware Phantompdf>=9.0<9.5
Foxitsoftware Reader<9.5
● CVE-2018-20309
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyGetAppEdition race condition that can cause a stack-based buffer overflow or an out-of-bounds read.
Foxitsoftware Phantompdf<8.3.10
Foxitsoftware Phantompdf>=9.0<9.5
Foxitsoftware Reader<9.5
● CVE-2018-20312
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read, a different issue th...
Foxitsoftware Phantompdf<8.3.10
Foxitsoftware Phantompdf>=9.0<9.5
Foxitsoftware Reader<9.5
● CVE-2020-12247
In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information from an out-of-bounds read because a text-string index continues to be used after ...
Foxitsoftware Phantompdf<=9.7.2.29539
Microsoft Windows
Foxitsoftware Phantompdf<=10.0.0.35798
Foxitsoftware Reader<=10.0.0.35798
● CVE-2020-12248
In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can execute arbitrary code via a heap-based buffer overflow because dirty image-resource data is mishandled.
Foxitsoftware Phantompdf<=9.7.2.29539
Microsoft Windows
Foxitsoftware Phantompdf<=10.0.0.35798
Foxitsoftware Reader<=10.0.0.35798
● CVE-2020-11493
In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information about an uninitialized object because of direct transformation from PDF Object to ...
Foxitsoftware Phantompdf<=9.7.2.29539
Microsoft Windows
Foxitsoftware Phantompdf<=10.0.0.35798
Foxitsoftware Reader<=10.0.0.35798
● CVE-2020-15637
Foxit PhantomPDF SetLocalDescription Use-After-Free Information Disclosure Vulnerability
Foxit PhantomPDF
Foxitsoftware Phantompdf<=10.0.0.35798
Foxitsoftware Reader<=10.0.0.35798
Microsoft Windows
● CVE-2020-15638
Foxit PhantomPDF JSCreate Type Confusion Remote Code Execution Vulnerability
Foxit PhantomPDF
Foxitsoftware Phantompdf<=10.0.0.35798
Foxitsoftware Reader<=10.0.0.35798
Microsoft Windows
● CVE-2019-20837
An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It allows signature validation bypass via a modified file or a file with non-standard signatures.
Foxitsoftware Phantompdf<9.5
Foxitsoftware Reader<9.5
● CVE-2019-20835
An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has homograph mishandling.
Foxitsoftware Phantompdf<9.5
Foxitsoftware Reader<9.5
● CVE-2019-20836
An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has mishandling of cloud credentials, as demonstrated by Google Drive.
Foxitsoftware Phantompdf<9.5
Foxitsoftware Reader<9.5
● CVE-2019-20827
Foxitsoftware Phantompdf<3.3
Foxitsoftware Reader<3.3
● CVE-2019-20830
An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has an out-of-bounds write when Internet Explorer is used.
Foxitsoftware Phantompdf<9.6
Foxitsoftware Reader<9.6
● CVE-2019-20829
An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a NULL pointer dereference via FXSYS_wcslen in an Epub file.
Foxitsoftware Phantompdf<9.6
Foxitsoftware Reader<9.6
● CVE-2019-20828
An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs.
Foxitsoftware Phantompdf<9.6
Foxitsoftware Reader<9.6
● CVE-2019-20826
An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It has a NULL pointer dereference.
Foxitsoftware Phantompdf<3.3
Foxitsoftware Reader<3.3
● CVE-2018-21239
An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows NTLM credential theft via a GoToE or GoToR action.
Foxitsoftware Phantompdf<9.2
Foxitsoftware Reader<9.2
● CVE-2018-21236
An issue was discovered in Foxit Reader before 2.4.4. It has a NULL pointer dereference.
Foxitsoftware Reader<=2.4.4
● CVE-2018-21240
An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows memory consumption via an ArrayBuffer(0xfffffffe) call.
Foxitsoftware Phantompdf<9.2
Foxitsoftware Reader<9.2
● CVE-2020-13815
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It allows stack consumption via a loop of an indirect object reference.
Foxitsoftware Phantompdf<9.7.1
Foxitsoftware Reader<9.7.1
● CVE-2020-13814
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It has a use-after-free via a document that lacks a dictionary.
Foxitsoftware Phantompdf<9.7.1
Foxitsoftware Reader<9.7.1
● CVE-2019-20817
An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference.
Foxitsoftware Phantompdf<9.7
Foxitsoftware Reader<9.7
● CVE-2019-20819
An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows stack consumption via nested function calls for XML parsing.
Foxitsoftware Phantompdf<9.7
Foxitsoftware Reader<9.7
● CVE-2019-20818
An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows memory consumption because data is created for each page of an application level.
Foxitsoftware Phantompdf<9.7
Foxitsoftware Reader<9.7
● CVE-2019-20820
An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference during the parsing of file data.
Foxitsoftware Phantompdf<9.7
Foxitsoftware Reader<9.7
● CVE-2020-13809
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via long strings in the content stream.
Foxitsoftware Phantompdf<9.7.2
Foxitsoftware Reader<9.7.2
● CVE-2020-13810
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows signature validation bypass via a modified file or a file with non-standard signatures.
Foxitsoftware Phantompdf<9.7.2
Foxitsoftware Reader<9.7.2
● CVE-2020-13807
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has circular reference mishandling that causes a loop.
Foxitsoftware Phantompdf<9.7.2
Foxitsoftware Reader<9.7.2
● CVE-2020-13806
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has a use-after-free because of JavaScript execution after a deletion or close operation.
Foxitsoftware Phantompdf<9.7.2
Foxitsoftware Reader<9.7.2
● CVE-2020-13808
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via crafted cross-reference stream data.
Foxitsoftware Phantompdf<9.7.2
Foxitsoftware Reader<9.7.2
● CVE-2020-13805
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack mishandling because the CAS service lacks a limit on login failures.
Foxitsoftware Phantompdf<9.7.2
Foxitsoftware Reader<9.7.2
● CVE-2020-13803
An issue was discovered in Foxit PhantomPDF Mac and Foxit Reader for Mac before 4.0. It allows signature validation bypass via a modified file or a file with non-standard signatures.
Foxitsoftware Phantompdf<4.0
Foxitsoftware Reader<4.0
● CVE-2020-13804
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows information disclosure of a hardcoded username and password in the DocuSign plugin.
Foxitsoftware Phantompdf<9.7.2
Foxitsoftware Reader<9.7.2
● CVE-2020-10901
Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Foxit PhantomPDF
Foxitsoftware Phantompdf<=9.7.1.29511
Foxitsoftware Reader<=9.7.1.29511
Microsoft Windows
● CVE-2020-10909
Foxit PhantomPDF AddWatermark Type Confusion Remote Code Execution Vulnerability
Foxit PhantomPDF
Foxitsoftware Phantompdf<=9.7.1.29511
Foxitsoftware Reader<=9.7.1.29511
Microsoft Windows
● CVE-2020-10904
Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Foxit PhantomPDF
Foxitsoftware Phantompdf<=9.7.1.29511
Foxitsoftware Reader<=9.7.1.29511
Microsoft Windows
● CVE-2020-10910
Foxit PhantomPDF RotatePage Type Confusion Remote Code Execution Vulnerability
Foxit PhantomPDF
Foxitsoftware Phantompdf<=9.7.1.29511
Foxitsoftware Reader<=9.7.1.29511
Microsoft Windows
● CVE-2020-10912
Foxit PhantomPDF SetFieldValue Type Confusion Remote Code Execution Vulnerability
Foxitsoftware Phantompdf<=9.7.1.29511
Foxitsoftware Reader<=9.7.1.29511
Microsoft Windows
Foxit PhantomPDF

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203