CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2016-4065 – Foxit Reader ConvertToPDF BMP Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2016-4065
23 Mar 2016 — The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 7.3.4 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted (1) JPEG, (2) GIF, or (3) BMP image. El plugin ConvertToPDF en Foxit Reader y PhantomPDF en versiones anteriores a 7.3.4 en Windows, cuando la aplicación gflags está activa, permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites y caída de aplicación) a t... • http://www.zerodayinitiative.com/advisories/ZDI-16-216 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.4EPSS: 0%CPEs: 10EXPL: 0CVE-2015-8843 – Foxit FoxitCloudUpdateService Local Privilege Escalation Vulnerability
https://notcve.org/view.php?id=CVE-2015-8843
15 Dec 2015 — The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local users to gain privileges by writing crafted data to a shared memory region, which triggers memory corruption. El Foxit Cloud Update Service (FoxitCloudUpdateService) en Foxit Reader 6.1 hasta la versión 6.2.x y 7.x en versiones anteriores a 7.2.2, cuando una actualización para el plugin Cloud está disponible, permite a usuarios locales... • http://www.zerodayinitiative.com/advisories/ZDI-15-640 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2015-8580 – Foxit PhantomPDF App Use-After-Free Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2015-8580
08 Dec 2015 — Multiple use-after-free vulnerabilities in the (1) Print method and (2) App object handling in Foxit Reader before 7.2.2 and Foxit PhantomPDF before 7.2.2 allow remote attackers to execute arbitrary code via a crafted PDF document. Múltiples vulnerabilidades de uso después de liberación de memoria en (1) el método Print y (2) el manejador de objetos App en Foxit Reader en versiones anteriores a 7.2.2 y Foxit PhantomPDF en versiones anteriores a 7.2.2 permite a atacantes remotos ejecutar código arbitrario a ... • http://www.zerodayinitiative.com/advisories/ZDI-15-622 •
CVSS: 6.5EPSS: 6%CPEs: 3EXPL: 3CVE-2015-3632 – Foxit Reader PDF 7.1.3.320 - Parsing Memory Corruption
https://notcve.org/view.php?id=CVE-2015-3632
01 May 2015 — Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted GIF in a PDF file. Foxit Reader, Enterprise Reader, y PhantomPDF anterior a 7.1.5 permiten a atacantes remotos causar una denegación de servicio (corrupción de memoria y caída) a través de un GIF manipulado en un fichero PDF. • https://www.exploit-db.com/exploits/36859 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 0CVE-2015-3633
https://notcve.org/view.php?id=CVE-2015-3633
01 May 2015 — Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a denial of service (memory corruption and crash) via vectors related to digital signatures. Foxit Reader, Enterprise Reader, y PhantomPDF anterior a 7.1.5 permiten a atacantes remotos causar una denegación de servicio (corrupción de memoria y caída) a través de vectores relacionados con firmas digitales. • http://www.foxitsoftware.com/support/security_bulletins.php#FRD-26 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 7EXPL: 3CVE-2015-2789 – Foxit Reader 7.0.6.1126 - Unquoted Service Path Privilege Escalation
https://notcve.org/view.php?id=CVE-2015-2789
30 Mar 2015 — Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder. Vulnerabilidad de búsqueda de ruta en Windows sin entrecomillar en el servicio de actualizaciones seguras Foxit Cloud en el plugin Cloud en Foxit Reader 6.1 hasta 7.0.6.1126 permite a usuarios locales ganar privilegios a través de un programa troyano en la carpeta %SYSTEMDRIVE... • https://www.exploit-db.com/exploits/36390 •
CVSS: 7.5EPSS: 64%CPEs: 3EXPL: 6CVE-2015-2790 – Foxit Products GIF Conversion - 'DataSubBlock' Memory Corruption
https://notcve.org/view.php?id=CVE-2015-2790
30 Mar 2015 — Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1) Ubyte Size in a DataSubBlock structure or (2) LZWMinimumCodeSize in a GIF image. Foxit Reader, Enterprise Reader, y PhantomPDF anterior a 7.1 permiten a atacantes remotos causar una denegación de servicio (corrupción de memoria y caída) a través de (1) un tamaño Ubyte manipulado en una estructura DataSubBlock o (2) un LZWMinimumCodeSize manipulado en ... • https://www.exploit-db.com/exploits/36335 • CWE-20: Improper Input Validation •
CVSS: 7.3EPSS: 1%CPEs: 1EXPL: 0CVE-2012-4759
https://notcve.org/view.php?id=CVE-2012-4759
06 Sep 2012 — Untrusted search path vulnerability in facebook_plugin.fpi in the Facebook plug-in in Foxit Reader 5.3.1.0606 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .pdf file. NOTE: some of these details are obtained from third party information. Vulnerabilidad de ruta de búsqueda no confiable en facebook_plugin.fpi en el complemento para Facebook en Foxit Reader v5.3.1.0606, permite a usuarios locales ganar p... • http://archives.neohapsis.com/archives/fulldisclosure/2012-08/0293.html •
CVSS: 9.3EPSS: 0%CPEs: 21EXPL: 0CVE-2012-4337
https://notcve.org/view.php?id=CVE-2012-4337
23 Aug 2012 — Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF document with a crafted attachment that triggers calculation of a negative number during processing of cross references. Foxit Reader anterior a v5.3 en Windows XP y Windows 7 permite a atacantes remotos ejecutar código arbitrario a través de un documento PDF con un adjunto manipulado que provoca el cálculo de un número negativo durante el procesamiento de referencias cruzadas. • http://secunia.com/advisories/50359 •
CVSS: 9.3EPSS: 9%CPEs: 16EXPL: 0CVE-2011-3691
https://notcve.org/view.php?id=CVE-2011-3691
27 Sep 2011 — Untrusted search path vulnerability in Foxit Reader before 5.0.2.0718 allows local users to gain privileges via a Trojan horse dwmapi.dll, dwrite.dll, or msdrm.dll in the current working directory. Vulnerabilidad de ruta de búsqueda no confiable en Foxit Reader v5.0.2.0718 y anteriores permite a usuarios locales conseguir privilegios a través de un caballo de Troya con dwmapi.dll, dwrite.dll o msdrm.dll en el directorio de trabajo actual. • http://www.solutionary.com/index/SERT/Vuln-Disclosures/Foxit-Reader.html • CWE-426: Untrusted Search Path •