PhantomPDF Mac

CVEs (226)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-13334	Foxitsoftware PhantomPDF Mac	Hig	0.51	7.8	0.07	Feb 8, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-13333	Foxitsoftware PhantomPDF Mac	Hig	0.51	7.8	0.07	Feb 8, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6776	Foxitsoftware PhantomPDF Mac	Hig	0.51	7.8	0.04	Oct 4, 2019	This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-13317	Foxitsoftware PhantomPDF Mac	Hig	0.51	7.8	0.08	Oct 4, 2019	This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-13316	Foxitsoftware PhantomPDF Mac	Hig	0.51	7.8	0.08	Oct 4, 2019	This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6765	Foxitsoftware PhantomPDF Mac	Hig	0.51	7.8	0.03	Jun 3, 2019	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6762	Foxitsoftware PhantomPDF Mac	Hig	0.51	7.8	0.03	Jun 3, 2019	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2018-16297	Foxitsoftware Foxit Reader Plugin	Hig	0.51	7.8	0.03	Oct 8, 2018	An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16292, CVE-2018-16293, CVE-2018-16294, CVE-2018-16295, and CVE-2018-16296. A specially…
CVE-2018-16296	Foxitsoftware Foxit Reader Plugin	Hig	0.51	7.8	0.03	Oct 8, 2018	An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16292, CVE-2018-16293, CVE-2018-16294, CVE-2018-16295, and CVE-2018-16297. A specially…
CVE-2018-16295	Foxitsoftware Foxit Reader Plugin	Hig	0.51	7.8	0.03	Oct 8, 2018	An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16292, CVE-2018-16293, CVE-2018-16294, CVE-2018-16296, and CVE-2018-16297. A specially…
CVE-2018-16294	Foxitsoftware Reader	Hig	0.51	7.8	0.03	Oct 8, 2018	An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16292, CVE-2018-16293, CVE-2018-16295, CVE-2018-16296, and CVE-2018-16297. A specially…
CVE-2018-16293	Foxitsoftware Foxit Reader Plugin	Hig	0.51	7.8	0.03	Oct 8, 2018	An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16292, CVE-2018-16294, CVE-2018-16295, CVE-2018-16296, and CVE-2018-16297. A specially…
CVE-2018-16292	Foxitsoftware Foxit Reader Plugin	Hig	0.51	7.8	0.03	Oct 8, 2018	An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16293, CVE-2018-16294, CVE-2018-16295, CVE-2018-16296, and CVE-2018-16297. A specially…
CVE-2018-16291	Foxitsoftware Foxit Reader Plugin	Hig	0.51	7.8	0.03	Oct 8, 2018	An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16292, CVE-2018-16293, CVE-2018-16294, CVE-2018-16295, CVE-2018-16296, and CVE-2018-16297. A specially…
CVE-2018-10302	Foxitsoftware Foxit Reader Plugin	Hig	0.51	7.8	0.03	Apr 23, 2018	A use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to execute arbitrary code, aka iDefense ID V-jyb51g3mv9.
CVE-2016-6169	Foxitsoftware Reader	Hig	0.51	7.8	0.05	Feb 7, 2018	Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service (memory corruption and application crash) or potentially execute arbitrary code via the Bezier data in a crafted PDF file.
CVE-2016-6168	Foxitsoftware Reader	Hig	0.51	7.8	0.03	Feb 7, 2018	Use-after-free vulnerability in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a crafted PDF file.
CVE-2017-8455	Foxitsoftware Reader	Hig	0.51	7.8	0.04	May 3, 2017	Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted font in a PDF document.
CVE-2016-4065	Foxitsoftware Reader	Hig	0.51	7.8	0.03	Apr 22, 2016	The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 7.3.4 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted (1) JPEG, (2) GIF, or (3) BMP image.
CVE-2016-4064	Foxitsoftware Reader	Hig	0.51	7.8	0.04	Apr 22, 2016	Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted remerge call.

CVE-2019-13334HigFeb 8, 2020
Foxitsoftware
PhantomPDF Mac
risk 0.51cvss 7.8epss 0.07
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-13333HigFeb 8, 2020
Foxitsoftware
PhantomPDF Mac
risk 0.51cvss 7.8epss 0.07
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6776HigOct 4, 2019
Foxitsoftware
PhantomPDF Mac
risk 0.51cvss 7.8epss 0.04
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-13317HigOct 4, 2019
Foxitsoftware
PhantomPDF Mac
risk 0.51cvss 7.8epss 0.08
This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-13316HigOct 4, 2019
Foxitsoftware
PhantomPDF Mac
risk 0.51cvss 7.8epss 0.08
This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6765HigJun 3, 2019
Foxitsoftware
PhantomPDF Mac
risk 0.51cvss 7.8epss 0.03
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6762HigJun 3, 2019
Foxitsoftware
PhantomPDF Mac
risk 0.51cvss 7.8epss 0.03
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2018-16297HigOct 8, 2018
Foxitsoftware
Foxit Reader Plugin
risk 0.51cvss 7.8epss 0.03
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16292, CVE-2018-16293, CVE-2018-16294, CVE-2018-16295, and CVE-2018-16296. A specially…
CVE-2018-16296HigOct 8, 2018
Foxitsoftware
Foxit Reader Plugin
risk 0.51cvss 7.8epss 0.03
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16292, CVE-2018-16293, CVE-2018-16294, CVE-2018-16295, and CVE-2018-16297. A specially…
CVE-2018-16295HigOct 8, 2018
Foxitsoftware
Foxit Reader Plugin
risk 0.51cvss 7.8epss 0.03
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16292, CVE-2018-16293, CVE-2018-16294, CVE-2018-16296, and CVE-2018-16297. A specially…
CVE-2018-16294HigOct 8, 2018
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.03
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16292, CVE-2018-16293, CVE-2018-16295, CVE-2018-16296, and CVE-2018-16297. A specially…
CVE-2018-16293HigOct 8, 2018
Foxitsoftware
Foxit Reader Plugin
risk 0.51cvss 7.8epss 0.03
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16292, CVE-2018-16294, CVE-2018-16295, CVE-2018-16296, and CVE-2018-16297. A specially…
CVE-2018-16292HigOct 8, 2018
Foxitsoftware
Foxit Reader Plugin
risk 0.51cvss 7.8epss 0.03
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16293, CVE-2018-16294, CVE-2018-16295, CVE-2018-16296, and CVE-2018-16297. A specially…
CVE-2018-16291HigOct 8, 2018
Foxitsoftware
Foxit Reader Plugin
risk 0.51cvss 7.8epss 0.03
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16292, CVE-2018-16293, CVE-2018-16294, CVE-2018-16295, CVE-2018-16296, and CVE-2018-16297. A specially…
CVE-2018-10302HigApr 23, 2018
Foxitsoftware
Foxit Reader Plugin
risk 0.51cvss 7.8epss 0.03
A use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to execute arbitrary code, aka iDefense ID V-jyb51g3mv9.
CVE-2016-6169HigFeb 7, 2018
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.05
Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service (memory corruption and application crash) or potentially execute arbitrary code via the Bezier data in a crafted PDF file.
CVE-2016-6168HigFeb 7, 2018
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.03
Use-after-free vulnerability in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a crafted PDF file.
CVE-2017-8455HigMay 3, 2017
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.04
Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted font in a PDF document.
CVE-2016-4065HigApr 22, 2016
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.03
The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 7.3.4 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted (1) JPEG, (2) GIF, or (3) BMP image.
CVE-2016-4064HigApr 22, 2016
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.04
Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted remerge call.

Page 7 of 12