Foxitsoftware

Reader

259 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2018-21240

  • EPSS 0.02%
  • Published 04.06.2020 17:15:10
  • Last modified 21.11.2024 04:03:15

An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows memory consumption via an ArrayBuffer(0xfffffffe) call.

9.8

CVE-2020-13814

  • EPSS 0.03%
  • Published 04.06.2020 16:15:13
  • Last modified 21.11.2024 05:01:55

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It has a use-after-free via a document that lacks a dictionary.

7.5

CVE-2020-13815

  • EPSS 0.02%
  • Published 04.06.2020 16:15:13
  • Last modified 21.11.2024 05:01:55

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It allows stack consumption via a loop of an indirect object reference.

7.5

CVE-2019-20817

  • EPSS 0.02%
  • Published 04.06.2020 16:15:12
  • Last modified 21.11.2024 04:39:26

An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference.

7.5

CVE-2019-20818

  • EPSS 0.02%
  • Published 04.06.2020 16:15:12
  • Last modified 21.11.2024 04:39:26

An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows memory consumption because data is created for each page of an application level.

7.5

CVE-2019-20819

  • EPSS 0.03%
  • Published 04.06.2020 16:15:12
  • Last modified 21.11.2024 04:39:26

An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows stack consumption via nested function calls for XML parsing.

7.5

CVE-2019-20820

  • EPSS 0.03%
  • Published 04.06.2020 16:15:12
  • Last modified 21.11.2024 04:39:26

An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference during the parsing of file data.

9.8

CVE-2020-13805

  • EPSS 0.02%
  • Published 04.06.2020 15:15:13
  • Last modified 21.11.2024 05:01:53

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack mishandling because the CAS service lacks a limit on login failures.

7.5

CVE-2020-13806

  • EPSS 0.05%
  • Published 04.06.2020 15:15:13
  • Last modified 21.11.2024 05:01:54

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has a use-after-free because of JavaScript execution after a deletion or close operation.

7.5

CVE-2020-13807

  • EPSS 0.02%
  • Published 04.06.2020 15:15:13
  • Last modified 21.11.2024 05:01:54

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has circular reference mishandling that causes a loop.