Reader (Foxitsoftware) - vulnerabilities (CVEs)

259 CVEs, 0 in the last 30 days, 101 known versions, newest CVE from 2021-05-21. Vendor: Foxitsoftware.

CVEs of Reader

CVE-2021-31473 - CVSS 7.8 (high), 2021-05-21: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to…
CVE-2021-31459 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31458 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31461 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31460 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31456 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31457 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2018-20314 - CVSS 8.1 (high), 2021-01-07: Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCheckLicence race condition that can cause a stack-based buffer overflow…
CVE-2018-20313 - CVSS 8.1 (high), 2021-01-07: Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyPreviewAction race condition that can cause a stack-based buffer overflow…
CVE-2018-20316 - CVSS 8.1 (high), 2021-01-07: Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or…
CVE-2018-20315 - CVSS 8.1 (high), 2021-01-07: Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a race condition that can cause a stack-based buffer overflow or an…
CVE-2018-20310 - CVSS 8.1 (high), 2021-01-07: Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or…
CVE-2018-20309 - CVSS 8.1 (high), 2021-01-07: Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyGetAppEdition race condition that can cause a stack-based buffer overflow…
CVE-2018-20312 - CVSS 8.1 (high), 2021-01-07: Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or…
CVE-2018-20311 - CVSS 8.1 (high), 2021-01-07: Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCPDFAction race condition that can cause a stack-based buffer overflow or…
CVE-2020-12247 - CVSS 7.1 (high), 2020-09-04: In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information from an out-of-bounds read because a…
CVE-2020-11493 - CVSS 8.1 (high), 2020-09-04: In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information about an uninitialized object because of…
CVE-2020-12248 - CVSS 8.8 (high), 2020-09-04: In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can execute arbitrary code via a heap-based buffer overflow because dirty…
CVE-2020-15637 - CVSS 3.3 (low), 2020-08-20: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is…
CVE-2020-15638 - CVSS 7.8 (high), 2020-08-20: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.2.29539. User interaction is required…
CVE-2019-20835 - CVSS 4.3 (medium), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has homograph mishandling.
CVE-2019-20837 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It allows signature validation bypass via a modified file or a file with non-standard…
CVE-2019-20836 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has mishandling of cloud credentials, as demonstrated by Google Drive.
CVE-2019-20828 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a buffer overflow because a looping correction does not occur after JavaScript…
CVE-2019-20827 - CVSS 9.8 (critical), 2020-06-04: An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It allows stack consumption because of interaction between ICC-Based…
CVE-2019-20830 - CVSS 9.8 (critical), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has an out-of-bounds write when Internet Explorer is used.
CVE-2019-20826 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It has a NULL pointer dereference.
CVE-2019-20829 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a NULL pointer dereference via FXSYS_wcslen in an Epub file.
CVE-2018-21239 - CVSS 5.3 (medium), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows NTLM credential theft via a GoToE or GoToR action.
CVE-2018-21236 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit Reader before 2.4.4. It has a NULL pointer dereference.
CVE-2018-21240 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows memory consumption via an ArrayBuffer(0xfffffffe) call.
CVE-2020-13814 - CVSS 9.8 (critical), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It has a use-after-free via a document that lacks a dictionary.
CVE-2020-13815 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It allows stack consumption via a loop of an indirect object reference.
CVE-2019-20818 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows memory consumption because data is created for each page of an application level.
CVE-2019-20817 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference.
CVE-2019-20820 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference during the parsing of file data.
CVE-2019-20819 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows stack consumption via nested function calls for XML parsing.
CVE-2020-13806 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has a use-after-free because of JavaScript execution after a deletion or close…
CVE-2020-13809 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via long strings in the content stream.
CVE-2020-13805 - CVSS 9.8 (critical), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack mishandling because the CAS service lacks a limit on login…
CVE-2020-13808 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via crafted cross-reference stream data.
CVE-2020-13807 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has circular reference mishandling that causes a loop.
CVE-2020-13810 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows signature validation bypass via a modified file or a file with non-standard…
CVE-2020-13804 - CVSS 9.8 (critical), 2020-06-04: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows information disclosure of a hardcoded username and password in the DocuSign…
CVE-2020-13803 - CVSS 7.5 (high), 2020-06-04: An issue was discovered in Foxit PhantomPDF Mac and Foxit Reader for Mac before 4.0. It allows signature validation bypass via a modified file or a file with…
CVE-2020-10903 - CVSS 3.3 (low), 2020-04-22: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is…
CVE-2020-10906 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interaction is required to…
CVE-2020-10909 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required…
CVE-2020-10912 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required…
CVE-2020-10902 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required…
CVE-2020-10905 - CVSS 3.3 (low), 2020-04-22: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is…
CVE-2020-10908 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required…
CVE-2020-10911 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required…
CVE-2020-10901 - CVSS 3.3 (low), 2020-04-22: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is…
CVE-2020-10904 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required…
CVE-2020-10907 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interaction is required to…
CVE-2020-10910 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required…
CVE-2020-10900 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interaction is required to…
CVE-2020-10890 - CVSS 8.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required…
CVE-2020-10893 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required…
CVE-2020-10896 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required…
CVE-2020-10899 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interaction is required to…
CVE-2020-10889 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required…
CVE-2020-10892 - CVSS 8.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required…
CVE-2020-10895 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required…
CVE-2020-10898 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required…
CVE-2020-10891 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required…
CVE-2020-10894 - CVSS 3.3 (low), 2020-04-22: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is…
CVE-2020-10897 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required…
CVE-2020-8856 - CVSS 7.8 (high), 2020-02-14: This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25608. User interaction is required to…
CVE-2020-8855 - CVSS 7.8 (high), 2020-02-14: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.2947. User interaction is required to…
CVE-2020-8854 - CVSS 7.8 (high), 2020-02-14: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required…
CVE-2020-8857 - CVSS 7.8 (high), 2020-02-14: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455. User interaction is required to…
CVE-2020-8853 - CVSS 7.8 (high), 2020-02-14: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required…
CVE-2020-8846 - CVSS 7.8 (high), 2020-02-14: This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to…
CVE-2020-8849 - CVSS 7.8 (high), 2020-02-14: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455. User interaction is required to…
CVE-2020-8852 - CVSS 3.3 (low), 2020-02-14: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 9.7.0.29455. User interaction is…
CVE-2020-8845 - CVSS 7.8 (high), 2020-02-14: This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to…
CVE-2020-8848 - CVSS 7.8 (high), 2020-02-14: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455. User interaction is required to…
CVE-2020-8851 - CVSS 7.8 (high), 2020-02-14: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455. User interaction is required to…
CVE-2020-8844 - CVSS 7.8 (high), 2020-02-14: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.6.0.25114. User interaction is required to…
CVE-2020-8847 - CVSS 7.8 (high), 2020-02-14: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455. User interaction is required to…
CVE-2020-8850 - CVSS 7.8 (high), 2020-02-14: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455. User interaction is required to…
CVE-2019-5126 - CVSS 8.8 (high), 2020-01-16: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can…
CVE-2019-5145 - CVSS 8.8 (high), 2020-01-16: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can…
CVE-2019-5131 - CVSS 8.8 (high), 2020-01-16: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF…
CVE-2019-5130 - CVSS 8.8 (high), 2020-01-16: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.7.0.29435. A specially crafted PDF…
CVE-2019-17183 - CVSS 7.5 (high), 2019-10-04: Foxit Reader before 9.7 allows an Access Violation and crash if insufficient memory exists.
CVE-2019-6775 - CVSS 7.8 (high), 2019-10-04: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to…
CVE-2019-6774 - CVSS 7.8 (high), 2019-10-04: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.4.1.16828. User interaction is required to…
CVE-2019-6776 - CVSS 7.8 (high), 2019-10-04: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required…
CVE-2019-13315 - CVSS 7.8 (high), 2019-10-04: This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to…
CVE-2019-13318 - CVSS 5.5 (medium), 2019-10-04: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 9.5.0.20723. User interaction is…
CVE-2019-13317 - CVSS 7.8 (high), 2019-10-04: This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to…
CVE-2019-13320 - CVSS 7.8 (high), 2019-10-04: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to…
CVE-2019-13316 - CVSS 7.8 (high), 2019-10-04: This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to…
CVE-2019-13319 - CVSS 7.8 (high), 2019-10-04: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to…
CVE-2019-13332 - CVSS 7.8 (high), 2019-10-03: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.6.0.25114. User interaction is required to…
CVE-2019-13331 - CVSS 7.8 (high), 2019-10-03: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to…
CVE-2019-13327 - CVSS 7.8 (high), 2019-10-03: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to…