foxitsoftware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/foxitsoftware/ Sun, 26 Feb 2023 09:11:55 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png foxitsoftware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/foxitsoftware/ 32 32 CVE-2008-7225 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7225/ Sun, 26 Feb 2023 09:11:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7225/ Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SSH packets, a different vulnerability than CVE-2008-0151.

The post CVE-2008-7225 appeared first on CVE Vulnerability.

]]> Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SSH packets, a different vulnerability than CVE-2008-0151.

The post CVE-2008-7225 appeared first on CVE Vulnerability.

]]> CVE-2008-7031 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7031/ Sun, 26 Feb 2023 09:11:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7031/ Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SSH packets, a different vulnerability than CVE-2008-0151.

The post CVE-2008-7031 appeared first on CVE Vulnerability.

]]> Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SSH packets, a different vulnerability than CVE-2008-0151.

The post CVE-2008-7031 appeared first on CVE Vulnerability.

]]> CVE-2018-21235 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-21235/ Sun, 26 Feb 2023 06:48:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-21235/ An issue was discovered in Foxit E-mail advertising system before September 2018. It allows authentication bypass and information disclosure, related to Interspire Email Marketer.

The post CVE-2018-21235 appeared first on CVE Vulnerability.

]]> An issue was discovered in Foxit E-mail advertising system before September 2018. It allows authentication bypass and information disclosure, related to Interspire Email Marketer.

The post CVE-2018-21235 appeared first on CVE Vulnerability.

]]> CVE-2018-19448 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19448/ Sun, 26 Feb 2023 06:48:10 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19448/ In Foxit Reader SDK (ActiveX) Professional 5.4.0.1031, an uninitialized object in IReader_ContentProvider::GetDocEventHandler occurs when embedding the control into Office documents. By opening a specially crafted document, an attacker can trigger an out of bounds write condition, possibly leveraging this to gain remote code execution.

The post CVE-2018-19448 appeared first on CVE Vulnerability.

]]> In Foxit Reader SDK (ActiveX) Professional 5.4.0.1031, an uninitialized object in IReader_ContentProvider::GetDocEventHandler occurs when embedding the control into Office documents. By opening a specially crafted document, an attacker can trigger an out of bounds write condition, possibly leveraging this to gain remote code execution.

The post CVE-2018-19448 appeared first on CVE Vulnerability.

]]> CVE-2018-19449 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19449/ Sun, 26 Feb 2023 06:48:10 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19449/ A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.exportAsFDF is used. An attacker can leverage this to gain remote code execution.

The post CVE-2018-19449 appeared first on CVE Vulnerability.

]]> A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.exportAsFDF is used. An attacker can leverage this to gain remote code execution.

The post CVE-2018-19449 appeared first on CVE Vulnerability.

]]> CVE-2018-19450 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19450/ Sun, 26 Feb 2023 06:48:10 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19450/ A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing a launch action. An attacker can leverage this to gain remote code execution.

The post CVE-2018-19450 appeared first on CVE Vulnerability.

]]> A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing a launch action. An attacker can leverage this to gain remote code execution.

The post CVE-2018-19450 appeared first on CVE Vulnerability.

]]> CVE-2018-19451 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19451/ Sun, 26 Feb 2023 06:48:10 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19451/ A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when using the Open File action on a Field. An attacker can leverage this to gain remote code execution.

The post CVE-2018-19451 appeared first on CVE Vulnerability.

]]> A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when using the Open File action on a Field. An attacker can leverage this to gain remote code execution.

The post CVE-2018-19451 appeared first on CVE Vulnerability.

]]> CVE-2018-19452 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19452/ Sun, 26 Feb 2023 06:48:10 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19452/ A use after free in the TextBox field Mouse Enter action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19444, this has a different free location and requires different JavaScript code for exploitation.

The post CVE-2018-19452 appeared first on CVE Vulnerability.

]]> A use after free in the TextBox field Mouse Enter action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19444, this has a different free location and requires different JavaScript code for exploitation.

The post CVE-2018-19452 appeared first on CVE Vulnerability.

]]> CVE-2018-19444 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19444/ Sun, 26 Feb 2023 06:48:09 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19444/ A use after free in the TextBox field Validate action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19452, this has a different free location and requires different JavaScript code for exploitation.

The post CVE-2018-19444 appeared first on CVE Vulnerability.

]]> A use after free in the TextBox field Validate action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19452, this has a different free location and requires different JavaScript code for exploitation.

The post CVE-2018-19444 appeared first on CVE Vulnerability.

]]> CVE-2018-19445 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19445/ Sun, 26 Feb 2023 06:48:09 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19445/ A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API app.launchURL is used. An attacker can leverage this to gain remote code execution.

The post CVE-2018-19445 appeared first on CVE Vulnerability.

]]> A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API app.launchURL is used. An attacker can leverage this to gain remote code execution.

The post CVE-2018-19445 appeared first on CVE Vulnerability.

]]>