Foxitsoftware

Foxit Reader

377 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2011-1908

  • EPSS 0.73%
  • Veröffentlicht 24.06.2011 20:55:03
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Integer overflow in the Type 1 font decoder in the FreeType engine in Foxit Reader before 4.0.0.0619 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted font in a PDF document.

9.3

CVE-2011-0332

  • EPSS 2.41%
  • Veröffentlicht 25.02.2011 19:00:00
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Integer overflow in Foxit Reader before 4.3.1.0218 and Foxit Phantom before 2.3.3.1112 allows remote attackers to execute arbitrary code via crafted ICC chunks in a PDF file, which triggers a heap-based buffer overflow.

9.3

CVE-2010-1239

Exploit
  • EPSS 5%
  • Veröffentlicht 05.04.2010 15:30:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Foxit Reader before 3.2.1.0401 allows remote attackers to (1) execute arbitrary local programs via a certain "/Type /Action /S /Launch" sequence, and (2) execute arbitrary programs embedded in a PDF document via an unspecified "/Launch /Action" seque...

9.3

CVE-2009-0690

  • EPSS 0.87%
  • Veröffentlicht 23.06.2009 21:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a negative value for the stream offset in a JPEG2000 (aka JPX) stream, which allows remote attackers to cause a denial of serv...

9.3

CVE-2009-0691

  • EPSS 1.18%
  • Veröffentlicht 23.06.2009 21:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 (aka JPX) header, which allows remote attackers to cause a denial of service (memo...

9.3

CVE-2009-0191

  • EPSS 0.96%
  • Veröffentlicht 10.03.2009 20:30:06
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allows remote attackers to execute arbitrary code via a crafted PDF file th...

9.3

CVE-2008-1104

  • EPSS 9.97%
  • Veröffentlicht 21.05.2008 13:24:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function and floating point specifiers in format strings.