foxit_reader Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/foxit_reader/ Sun, 26 Feb 2023 06:36:00 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png foxit_reader Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/foxit_reader/ 32 32 CVE-2020-10913 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-10913/ Sun, 26 Feb 2023 06:36:00 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-10913/ This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the OCRAndExportToExcel command of the communication API. The issue […]

The post CVE-2020-10913 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the OCRAndExportToExcel command of the communication API. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9946.

The post CVE-2020-10913 appeared first on CVE Vulnerability.

]]> CVE-2019-8342 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-8342/ Sun, 26 Feb 2023 06:34:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-8342/ A Local Privilege Escalation in libqcocoa.dylib in Foxit Reader 3.1.0.0111 on macOS has been discovered due to an incorrect permission set.

The post CVE-2019-8342 appeared first on CVE Vulnerability.

]]> A Local Privilege Escalation in libqcocoa.dylib in Foxit Reader 3.1.0.0111 on macOS has been discovered due to an incorrect permission set.

The post CVE-2019-8342 appeared first on CVE Vulnerability.

]]> CVE-2019-6773 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6773/ Sun, 26 Feb 2023 06:34:04 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6773/ This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the richValue property of a Field object within AcroForms. […]

The post CVE-2019-6773 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the richValue property of a Field object within AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-8272.

The post CVE-2019-6773 appeared first on CVE Vulnerability.

]]> CVE-2019-6772 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6772/ Sun, 26 Feb 2023 06:34:04 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6772/ This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 2019.010.20098. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the removeField method when processing AcroForms. The issue results from the lack […]

The post CVE-2019-6772 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 2019.010.20098. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the removeField method when processing AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-8231.

The post CVE-2019-6772 appeared first on CVE Vulnerability.

]]> CVE-2019-6771 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6771/ Sun, 26 Feb 2023 06:34:04 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6771/ This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 2019.010.20098. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the value property of a Field object within AcroForms. […]

The post CVE-2019-6771 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 2019.010.20098. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the value property of a Field object within AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-8230.

The post CVE-2019-6771 appeared first on CVE Vulnerability.

]]> CVE-2019-6770 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6770/ Sun, 26 Feb 2023 06:34:04 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6770/ This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the resetForm method when processing AcroForms. The issue results from the lack […]

The post CVE-2019-6770 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the resetForm method when processing AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-8229.

The post CVE-2019-6770 appeared first on CVE Vulnerability.

]]> CVE-2019-6769 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6769/ Sun, 26 Feb 2023 06:34:04 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6769/ This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the removeField method when processing AcroForms. The issue results from the lack […]

The post CVE-2019-6769 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the removeField method when processing AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-8165.

The post CVE-2019-6769 appeared first on CVE Vulnerability.

]]> CVE-2019-6768 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6768/ Sun, 26 Feb 2023 06:34:04 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6768/ This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the removeField method when processing AcroForms. The issue results from the lack […]

The post CVE-2019-6768 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the removeField method when processing AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-8164.

The post CVE-2019-6768 appeared first on CVE Vulnerability.

]]> CVE-2019-6767 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6767/ Sun, 26 Feb 2023 06:34:04 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6767/ This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the removeField method when processing AcroForms. The issue results from the lack […]

The post CVE-2019-6767 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the removeField method when processing AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-8163.

The post CVE-2019-6767 appeared first on CVE Vulnerability.

]]> CVE-2019-6766 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6766/ Sun, 26 Feb 2023 06:34:04 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6766/ This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the removeField method when processing AcroForms. The issue results from the lack […]

The post CVE-2019-6766 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the removeField method when processing AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-8162.

The post CVE-2019-6766 appeared first on CVE Vulnerability.

]]>