Foxitsoftware Reader
259 CVEs affecting Foxitsoftware Reader. Latest disclosed: 2021-05-21. Critical: 10, High: 228.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-20830 | Critical | 9.8 | 2020-06-04 | An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has an out-of-bounds write when Internet Explorer is used. |
CVE-2019-20827 | Critical | 9.8 | 2020-06-04 | An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It allows stack consumption because of interaction between ICC-Based c… |
CVE-2020-13814 | Critical | 9.8 | 2020-06-04 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It has a use-after-free via a document that lacks a dictionary. |
CVE-2020-13805 | Critical | 9.8 | 2020-06-04 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack mishandling because the CAS service lacks a limit on login failu… |
CVE-2020-13804 | Critical | 9.8 | 2020-06-04 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows information disclosure of a hardcoded username and password in the DocuSign plug… |
CVE-2018-17611 | Critical | 9.8 | 2018-09-28 | Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Ann… |
CVE-2018-17610 | Critical | 9.8 | 2018-09-28 | Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Ann… |
CVE-2018-17609 | Critical | 9.8 | 2018-09-28 | Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Ann… |
CVE-2018-17608 | Critical | 9.8 | 2018-09-28 | Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Ann… |
CVE-2018-17607 | Critical | 9.8 | 2018-09-28 | Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Ann… |
CVE-2020-12248 | High | 8.8 | 2020-09-04 | In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can execute arbitrary code via a heap-based buffer overflow because dirty… |
CVE-2020-10892 | High | 8.8 | 2020-04-22 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to… |
CVE-2020-10890 | High | 8.8 | 2020-04-22 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to… |
CVE-2019-5145 | High | 8.8 | 2020-01-16 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trig… |
CVE-2019-5131 | High | 8.8 | 2020-01-16 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF… |
CVE-2019-5130 | High | 8.8 | 2020-01-16 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.7.0.29435. A specially crafted PDF d… |
CVE-2019-5126 | High | 8.8 | 2020-01-16 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trig… |
CVE-2019-5031 | High | 8.8 | 2019-10-02 | An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.4.1.16828. A specially crafted P… |
CVE-2019-6731 | High | 8.8 | 2019-03-21 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit t… |
CVE-2019-6730 | High | 8.8 | 2019-03-21 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this… |