Browse CVEs

HIGH 7.5 CVE-2019-20837 An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It allows signature validation bypass via a modified file or a file with non-stand… Phantompdf 9.5+ Fix from $1,9502020-06-04 CRITICAL 9.8 CVE-2019-20825 An issue was discovered in Foxit PhantomPDF before 8.3.11. It has an out-of-bounds write when Internet Explorer is used. Phantompdf 8.3.11+ Fix from $2,3002020-06-04 CRITICAL 9.8 CVE-2019-20827 An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It allows stack consumption because of interaction between I… Phantompdf 3.3+ Fix from $2,3002020-06-04 CRITICAL 9.8 CVE-2019-20830 An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has an out-of-bounds write when Internet Explorer is used. Phantompdf 9.6+ Fix from $2,3002020-06-04 HIGH 7.5 CVE-2019-20823 An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a buffer overflow because a looping correction does not occur after JavaScript upda… Phantompdf 8.3.11+ Fix from $1,9502020-06-04 HIGH 7.5 CVE-2019-20824 An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a NULL pointer dereference via FXSYS_wcslen in an Epub file. Phantompdf 8.3.11+ Fix from $1,9502020-06-04 HIGH 7.5 CVE-2019-20826 An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It has a NULL pointer dereference. Phantompdf 3.3+ Fix from $1,9502020-06-04 HIGH 7.5 CVE-2019-20828 An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a buffer overflow because a looping correction does not occur after JavaScr… Phantompdf 9.6+ Fix from $1,9502020-06-04 HIGH 7.5 CVE-2019-20829 An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a NULL pointer dereference via FXSYS_wcslen in an Epub file. Phantompdf 9.6+ Fix from $1,9502020-06-04 HIGH 7.5 CVE-2019-20831 An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.5.0.20733. It has void data mishandling, causing a crash. 3d 9.5.0.20733+ Fix from $1,9502020-06-04 HIGH 7.5 CVE-2019-20833 An issue was discovered in Foxit PhantomPDF before 8.3.10. It has mishandling of cloud credentials, as demonstrated by Google Drive. Phantompdf 8.3.10+ Fix from $1,9502020-06-04 CRITICAL 9.8 CVE-2018-21242 An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows Remote Code Execution via a GoToE or GoToR action. Phantompdf 8.3.6+ Fix from $2,3002020-06-04 CRITICAL 9.8 CVE-2018-21244 An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows arbitrary application execution via an embedded executable file in a PDF portfoli… Phantompdf 8.3.6+ Fix from $2,3002020-06-04 MEDIUM 6.5 CVE-2018-21243 An issue was discovered in Foxit PhantomPDF before 8.3.6. It has COM object mishandling when Microsoft Word is used. Phantompdf 8.3.6+ Fix from $1,6002020-06-04 HIGH 7.8 CVE-2018-21241 An issue was discovered in Foxit PhantomPDF before 8.3.6. It has an untrusted search path that allows a DLL to execute remote code. Phantompdf 8.3.6+ Fix from $1,9502020-06-04 HIGH 7.5 CVE-2018-21235 An issue was discovered in Foxit E-mail advertising system before September 2018. It allows authentication bypass and information disclosure, related… E Mail Advertising System 09-2018+ Fix from $1,9502020-06-04 HIGH 7.5 CVE-2018-21236 An issue was discovered in Foxit Reader before 2.4.4. It has a NULL pointer dereference. Reader after 2.4.4 Fix from $1,9502020-06-04 HIGH 7.5 CVE-2018-21238 An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows memory consumption via an ArrayBuffer(0xfffffffe) call. Phantompdf 8.3.7+ Fix from $1,9502020-06-04 HIGH 7.5 CVE-2018-21240 An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows memory consumption via an ArrayBuffer(0xfffffffe) call. Phantompdf 9.2+ Fix from $1,9502020-06-04 MEDIUM 5.3 CVE-2018-21237 An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows NTLM credential theft via a GoToE or GoToR action. Phantompdf 8.3.7+ Fix from $1,6002020-06-04 MEDIUM 5.3 CVE-2018-21239 An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows NTLM credential theft via a GoToE or GoToR action. Phantompdf 9.2+ Fix from $1,6002020-06-04 CRITICAL 9.8 CVE-2020-13814 An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It has a use-after-free via a document that lacks a dictionary. Phantompdf 9.7.1+ Fix from $2,3002020-06-04 HIGH 7.8 CVE-2020-13812 An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working dir… Foxit Studio Photo 3.6.6.922+ Fix from $1,9502020-06-04 HIGH 7.8 CVE-2020-13813 An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working dir… Foxit Studio Photo 3.6.6.922+ Fix from $1,9502020-06-04 HIGH 7.5 CVE-2020-13815 An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It allows stack consumption via a loop of an indirect object reference. Phantompdf 9.7.1+ Fix from $1,9502020-06-04 CRITICAL 9.8 CVE-2019-20822 An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.7.0.29430. It has an out-of-bounds write via incorrect image d… 3d 9.7.0.29430+ Fix from $2,3002020-06-04 HIGH 7.8 CVE-2020-13811 An issue was discovered in Foxit Studio Photo before 3.6.6.922. It has an out-of-bounds write via a crafted TIFF file. Foxit Studio Photo 3.6.6.922+ Fix from $1,9502020-06-04 HIGH 7.5 CVE-2019-20814 An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows memory consumption because data is created for each page of an application level. Phantompdf 8.3.12+ Fix from $1,9502020-06-04 HIGH 7.5 CVE-2019-20815 An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows stack consumption via nested function calls for XML parsing. Phantompdf 8.3.12+ Fix from $1,9502020-06-04 HIGH 7.5 CVE-2019-20816 An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference during the parsing of file data. Phantompdf 8.3.12+ Fix from $1,9502020-06-04