Phantompdf (Foxitsoftware) - vulnerabilities (CVEs)

549 CVEs, 0 in the last 30 days, 145 known versions, newest CVE from 2021-08-11. Vendor: Foxitsoftware.

CVEs of Phantompdf

CVE-2021-38574 - CVSS 9.8 (critical), 2021-08-11: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows SQL Injection via crafted data at the end of a string.
CVE-2021-38568 - CVSS 9.8 (critical), 2021-08-11: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows memory corruption during conversion of a PDF document to a different document…
CVE-2021-38571 - CVSS 7.8 (high), 2021-08-11: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows DLL hijacking, aka CNVD-C-2021-68000 and CNVD-C-2021-68502.
CVE-2021-38570 - CVSS 9.1 (critical), 2021-08-11: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files (during uninstallation) via a symlink.
CVE-2021-38573 - CVSS 9.8 (critical), 2021-08-11: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname is not validated.
CVE-2021-38569 - CVSS 7.5 (high), 2021-08-11: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA…
CVE-2021-38572 - CVSS 9.8 (critical), 2021-08-11: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because the extractPages pathname is not validated.
CVE-2021-33794 - CVSS 9.1 (critical), 2021-08-11: Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA form…
CVE-2021-33793 - CVSS 9.8 (critical), 2021-08-11: Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document…
CVE-2021-33795 - CVSS 5.5 (medium), 2021-07-09: Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures because the certificate name, document owner, and signature…
CVE-2021-33792 - CVSS 7.8 (high), 2021-07-09: Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary.
CVE-2021-31476 - CVSS 7.8 (high), 2021-06-16: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598. User interaction is required…
CVE-2021-31473 - CVSS 7.8 (high), 2021-05-21: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to…
CVE-2021-31458 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31461 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31460 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31459 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31446 - CVSS 3.3 (low), 2021-05-07: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is…
CVE-2021-31449 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31452 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31455 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31442 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31445 - CVSS 3.3 (low), 2021-05-07: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is…
CVE-2021-31448 - CVSS 3.3 (low), 2021-05-07: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is…
CVE-2021-31451 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31454 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31457 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31441 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31444 - CVSS 3.3 (low), 2021-05-07: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is…
CVE-2021-31447 - CVSS 3.3 (low), 2021-05-07: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is…
CVE-2021-31450 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31453 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31456 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31443 - CVSS 3.3 (low), 2021-05-07: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is…
CVE-2021-27267 - CVSS 7.8 (high), 2021-03-30: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required…
CVE-2021-27270 - CVSS 7.8 (high), 2021-03-30: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required…
CVE-2021-27266 - CVSS 3.3 (low), 2021-03-30: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is…
CVE-2021-27269 - CVSS 7.8 (high), 2021-03-30: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required…
CVE-2021-27268 - CVSS 7.8 (high), 2021-03-30: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required…
CVE-2021-27271 - CVSS 7.8 (high), 2021-03-30: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required…
CVE-2021-27261 - CVSS 7.8 (high), 2021-03-30: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required…
CVE-2021-27264 - CVSS 3.3 (low), 2021-03-30: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is…
CVE-2021-27263 - CVSS 3.3 (low), 2021-03-30: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is…
CVE-2021-27262 - CVSS 3.3 (low), 2021-03-30: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is…
CVE-2021-27265 - CVSS 3.3 (low), 2021-03-30: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is…
CVE-2020-27860 - CVSS 7.8 (high), 2021-02-12: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to…
CVE-2018-20314 - CVSS 8.1 (high), 2021-01-07: Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCheckLicence race condition that can cause a stack-based buffer overflow…
CVE-2018-20313 - CVSS 8.1 (high), 2021-01-07: Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyPreviewAction race condition that can cause a stack-based buffer overflow…
CVE-2018-20316 - CVSS 8.1 (high), 2021-01-07: Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or…
CVE-2018-18688 - CVSS 5.3 (medium), 2021-01-07: The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures.…
CVE-2018-20315 - CVSS 8.1 (high), 2021-01-07: Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a race condition that can cause a stack-based buffer overflow or an…
CVE-2018-20309 - CVSS 8.1 (high), 2021-01-07: Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyGetAppEdition race condition that can cause a stack-based buffer overflow…
CVE-2018-20312 - CVSS 8.1 (high), 2021-01-07: Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or…
CVE-2018-20311 - CVSS 8.1 (high), 2021-01-07: Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCPDFAction race condition that can cause a stack-based buffer overflow or…
CVE-2018-20310 - CVSS 8.1 (high), 2021-01-07: Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or…
CVE-2020-35931 - CVSS 7.8 (high), 2020-12-31: An issue was discovered in Foxit Reader before 10.1.1 (and before 4.1.1 on macOS) and PhantomPDF before 9.7.5 and 10.x before 10.1.1 (and before 4.1.1 on…
CVE-2020-28203 - CVSS 5.5 (medium), 2020-12-15: An issue was discovered in Foxit Reader and PhantomPDF 10.1.0.37527 and earlier. There is a null pointer access/dereference while opening a crafted PDF file,…
CVE-2020-17414 - CVSS 7.8 (high), 2020-10-13: This vulnerability allows local attackers to escalate privileges on affected installations of Foxit Reader 10.0.0.35798. An attacker must first obtain the…
CVE-2020-17417 - CVSS 7.8 (high), 2020-10-13: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to…
CVE-2020-17416 - CVSS 7.8 (high), 2020-10-13: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.0.35798. User interaction is required to…
CVE-2020-17415 - CVSS 7.8 (high), 2020-10-13: This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PhantomPDF 10.0.0.35798. An attacker must first obtain the…
CVE-2020-17410 - CVSS 7.8 (high), 2020-10-13: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required…
CVE-2020-26535 - CVSS 9.8 (critical), 2020-10-02: An issue was discovered in Foxit Reader and PhantomPDF before 10.1. If TslAlloc attempts to allocate thread local storage but obtains an unacceptable index…
CVE-2020-26538 - CVSS 7.8 (high), 2020-10-02: An issue was discovered in Foxit Reader and PhantomPDF before 10.1. It allows attackers to execute arbitrary code via a Trojan horse taskkill.exe in the…
CVE-2020-26534 - CVSS 9.8 (critical), 2020-10-02: An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is an Opt object use-after-free related to Field::ClearItems and…
CVE-2020-26537 - CVSS 9.8 (critical), 2020-10-02: An issue was discovered in Foxit Reader and PhantomPDF before 10.1. In a certain Shading calculation, the number of outputs is unequal to the number of color…
CVE-2020-26540 - CVSS 7.5 (high), 2020-10-02: An issue was discovered in Foxit Reader and PhantomPDF before 4.1 on macOS. Because the Hardened Runtime protection mechanism is not applied to code signing,…
CVE-2020-26536 - CVSS 5.5 (medium), 2020-10-02: An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is a NULL pointer dereference via a crafted PDF document.
CVE-2020-26539 - CVSS 9.8 (critical), 2020-10-02: An issue was discovered in Foxit Reader and PhantomPDF before 10.1. When there is a multiple interpretation error for /V (in the Additional Action and Field…
CVE-2020-12247 - CVSS 7.1 (high), 2020-09-04: In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information from an out-of-bounds read because a…
CVE-2020-11493 - CVSS 8.1 (high), 2020-09-04: In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information about an uninitialized object because of…
CVE-2020-12248 - CVSS 8.8 (high), 2020-09-04: In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can execute arbitrary code via a heap-based buffer overflow because dirty…
CVE-2020-15637 - CVSS 3.3 (low), 2020-08-20: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is…
CVE-2020-15638 - CVSS 7.8 (high), 2020-08-20: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.2.29539. User interaction is required…
CVE-2019-20835 - CVSS 4.3 (medium), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has homograph mishandling.
CVE-2019-20834 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit PhantomPDF before 8.3.10. It allows signature validation bypass via a modified file or a file with non-standard signatures.
CVE-2019-20837 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It allows signature validation bypass via a modified file or a file with non-standard…
CVE-2019-20836 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has mishandling of cloud credentials, as demonstrated by Google Drive.
CVE-2019-20824 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a NULL pointer dereference via FXSYS_wcslen in an Epub file.
CVE-2019-20827 - CVSS 9.8 (critical), 2020-06-04: An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It allows stack consumption because of interaction between ICC-Based…
CVE-2019-20830 - CVSS 9.8 (critical), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has an out-of-bounds write when Internet Explorer is used.
CVE-2019-20823 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field…
CVE-2019-20826 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It has a NULL pointer dereference.
CVE-2019-20829 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a NULL pointer dereference via FXSYS_wcslen in an Epub file.
CVE-2019-20833 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit PhantomPDF before 8.3.10. It has mishandling of cloud credentials, as demonstrated by Google Drive.
CVE-2019-20825 - CVSS 9.8 (critical), 2020-06-04: An issue was discovered in Foxit PhantomPDF before 8.3.11. It has an out-of-bounds write when Internet Explorer is used.
CVE-2019-20828 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a buffer overflow because a looping correction does not occur after JavaScript…
CVE-2019-20832 - CVSS 4.3 (medium), 2020-06-04: An issue was discovered in Foxit PhantomPDF before 8.3.10. It has homograph mishandling.
CVE-2018-21243 - CVSS 6.5 (medium), 2020-06-04: An issue was discovered in Foxit PhantomPDF before 8.3.6. It has COM object mishandling when Microsoft Word is used.
CVE-2018-21242 - CVSS 9.8 (critical), 2020-06-04: An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows Remote Code Execution via a GoToE or GoToR action.
CVE-2018-21244 - CVSS 9.8 (critical), 2020-06-04: An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows arbitrary application execution via an embedded executable file in a PDF portfolio, aka…
CVE-2018-21240 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows memory consumption via an ArrayBuffer(0xfffffffe) call.
CVE-2018-21239 - CVSS 5.3 (medium), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows NTLM credential theft via a GoToE or GoToR action.
CVE-2018-21238 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows memory consumption via an ArrayBuffer(0xfffffffe) call.
CVE-2018-21241 - CVSS 7.8 (high), 2020-06-04: An issue was discovered in Foxit PhantomPDF before 8.3.6. It has an untrusted search path that allows a DLL to execute remote code.
CVE-2018-21237 - CVSS 5.3 (medium), 2020-06-04: An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows NTLM credential theft via a GoToE or GoToR action.
CVE-2020-13815 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It allows stack consumption via a loop of an indirect object reference.
CVE-2020-13814 - CVSS 9.8 (critical), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It has a use-after-free via a document that lacks a dictionary.
CVE-2019-20814 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows memory consumption because data is created for each page of an application level.
CVE-2019-20817 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference.