CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 1CVE-2021-41784
https://notcve.org/view.php?id=CVE-2021-41784
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled. Foxit PDF Reader versiones anteriores a 11.1 y PDF Editor versiones anteriores a 11.1, y PhantomPDF versiones anteriores a 10.1.6, permiten a atacantes desencadenar un uso de memoria previamente liberada y ejecutar código arbitrario porque JavaScript está manejado inapropiadamente • https://github.com/Jeromeyoung/CVE-2021-41784 https://www.foxit.com/support/security-bulletins.html • CWE-416: Use After Free •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2021-41785
https://notcve.org/view.php?id=CVE-2021-41785
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled. Foxit PDF Reader versiones anteriores a 11.1 y PDF Editor versiones anteriores a 11.1, y PhantomPDF versiones anteriores a 10.1.6, permiten a atacantes desencadenar un uso de memoria previamente liberada y ejecutar código arbitrario debido a un manejo inapropiado de JavaScript • https://www.foxit.com/support/security-bulletins.html • CWE-416: Use After Free •
CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 0CVE-2022-25641
https://notcve.org/view.php?id=CVE-2022-25641
Foxit PDF Reader before 11.2.2 and PDF Editor before 11.2.2, and PhantomPDF before 10.1.8, mishandle cross-reference information during compressed-object parsing within signed documents. This leads to delivery of incorrect signature information via an Incremental Saving Attack and a Shadow Attack. Foxit PDF Reader versiones anteriores a 11.2.2 y PDF Editor versiones anteriores a 11.2.2, y PhantomPDF versiones anteriores a 10.1.8, manejan inapropiadamente la información de referencias cruzadas durante el análisis de objetos comprimidos dentro de los documentos firmados. Esto conlleva a una entrega de información de firma incorrecta por medio de un Ataque de Guardado Incremental y un Ataque de Sombra • https://www.foxit.com/support/security-bulletins.html •
CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 0CVE-2021-38568
https://notcve.org/view.php?id=CVE-2021-38568
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows memory corruption during conversion of a PDF document to a different document format. Se ha detectado un problema en Foxit Reader y PhantomPDF versiones anteriores a 10.1.4. Permite una corrupción de memoria durante la conversión de un documento PDF a un formato de documento diferente • https://www.foxitsoftware.com/support/security-bulletins.php • CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2021-38569
https://notcve.org/view.php?id=CVE-2021-38569
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms or link objects. Se ha detectado un problema en Foxit Reader y PhantomPDF versiones anteriores a 10.1.4. Permite un consumo de pila por medio de llamadas a funciones recursivas durante el manejo de formularios XFA u objetos de enlace • https://www.foxitsoftware.com/support/security-bulletins.php • CWE-674: Uncontrolled Recursion •