Vendor CVEs

Foxitsoftware

All CVEs

1,171 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-6767	Foxitsoftware Reader	Hig	0.51	7.8	0.04	Jun 3, 2019	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6765	Foxitsoftware Reader	Hig	0.51	7.8	0.03	Jun 3, 2019	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6764	Foxitsoftware Reader	Hig	0.51	7.8	0.03	Jun 3, 2019	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6763	Foxitsoftware Reader	Hig	0.51	7.8	0.03	Jun 3, 2019	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6762	Foxitsoftware Reader	Hig	0.51	7.8	0.03	Jun 3, 2019	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6761	Foxitsoftware Reader	Hig	0.51	7.8	0.03	Jun 3, 2019	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.0.16811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6760	Foxitsoftware Reader	Hig	0.51	7.8	0.03	Jun 3, 2019	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.16811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6759	Foxitsoftware Reader	Hig	0.51	7.8	0.03	Jun 3, 2019	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.3.10826. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6757	Foxitsoftware Reader	Hig	0.51	7.8	0.04	Jun 3, 2019	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.16811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6755	Foxitsoftware Reader	Hig	0.51	7.8	0.03	Jun 3, 2019	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.3.10826. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6754	Foxitsoftware Reader	Hig	0.51	7.8	0.05	Jun 3, 2019	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.3.10826. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6751	Foxitsoftware Foxit Studio Photo	Hig	0.51	7.8	0.03	Jun 3, 2019	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo 3.6.6.779. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6750	Foxitsoftware Foxit Studio Photo	Hig	0.51	7.8	0.03	Jun 3, 2019	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo 3.6.6. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6749	Foxitsoftware Foxit Studio Photo	Hig	0.51	7.8	0.03	Jun 3, 2019	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo 3.6.6. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6748	Foxitsoftware Foxit Studio Photo	Hig	0.51	7.8	0.03	Jun 3, 2019	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo 3.6.6. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6747	Foxitsoftware Foxit Studio Photo	Hig	0.51	7.8	0.03	Jun 3, 2019	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo 3.6.6. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-8342	Foxitsoftware Reader	Hig	0.51	7.8	0.01	May 13, 2019	A Local Privilege Escalation in libqcocoa.dylib in Foxit Reader 3.1.0.0111 on macOS has been discovered due to an incorrect permission set.
CVE-2018-16297	Foxitsoftware Reader	Hig	0.51	7.8	0.03	Oct 8, 2018	An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16292, CVE-2018-16293, CVE-2018-16294, CVE-2018-16295, and CVE-2018-16296. A specially…
CVE-2018-16296	Foxitsoftware Reader	Hig	0.51	7.8	0.03	Oct 8, 2018	An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16292, CVE-2018-16293, CVE-2018-16294, CVE-2018-16295, and CVE-2018-16297. A specially…
CVE-2018-16295	Foxitsoftware Reader	Hig	0.51	7.8	0.03	Oct 8, 2018	An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16292, CVE-2018-16293, CVE-2018-16294, CVE-2018-16296, and CVE-2018-16297. A specially…
CVE-2018-16294	Foxitsoftware Reader	Hig	0.51	7.8	0.03	Oct 8, 2018	An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16292, CVE-2018-16293, CVE-2018-16295, CVE-2018-16296, and CVE-2018-16297. A specially…
CVE-2018-16293	Foxitsoftware Reader	Hig	0.51	7.8	0.03	Oct 8, 2018	An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16292, CVE-2018-16294, CVE-2018-16295, CVE-2018-16296, and CVE-2018-16297. A specially…
CVE-2018-16292	Foxitsoftware Reader	Hig	0.51	7.8	0.03	Oct 8, 2018	An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16293, CVE-2018-16294, CVE-2018-16295, CVE-2018-16296, and CVE-2018-16297. A specially…
CVE-2018-16291	Foxitsoftware Reader	Hig	0.51	7.8	0.03	Oct 8, 2018	An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16292, CVE-2018-16293, CVE-2018-16294, CVE-2018-16295, CVE-2018-16296, and CVE-2018-16297. A specially…
CVE-2018-3967	Foxitsoftware Reader	Hig	0.51	7.8	0.06	Oct 3, 2018	An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker…
CVE-2018-3966	Foxitsoftware Reader	Hig	0.51	7.8	0.06	Oct 3, 2018	An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker…
CVE-2018-3965	Foxitsoftware Reader	Hig	0.51	7.8	0.06	Oct 3, 2018	An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker…
CVE-2018-3964	Foxitsoftware Reader	Hig	0.51	7.8	0.09	Oct 3, 2018	An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker…
CVE-2018-3961	Foxitsoftware Reader	Hig	0.51	7.8	0.02	Oct 2, 2018	A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Creator property of the this.info object. An attacker needs to trick the user to open the malicious…
CVE-2018-3960	Foxitsoftware Reader	Hig	0.51	7.8	0.02	Oct 2, 2018	A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Producer property of the this.info object. An attacker needs to trick the user to open the malicious…
CVE-2018-3959	Foxitsoftware Reader	Hig	0.51	7.8	0.02	Oct 2, 2018	A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Author property of the this.info object. An attacker needs to trick the user to open the malicious file…
CVE-2018-3958	Foxitsoftware Reader	Hig	0.51	7.8	0.03	Oct 2, 2018	A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Subject property of the this.info object. An attacker needs to trick the user to open the malicious…
CVE-2018-3957	Foxitsoftware Reader	Hig	0.51	7.8	0.03	Oct 2, 2018	A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Keywords property of the this.info object. An attacker needs to trick the user to open the malicious…
CVE-2018-10302	Foxitsoftware Reader	Hig	0.51	7.8	0.03	Apr 23, 2018	A use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to execute arbitrary code, aka iDefense ID V-jyb51g3mv9.
CVE-2016-6169	Foxitsoftware Reader	Hig	0.51	7.8	0.05	Feb 7, 2018	Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service (memory corruption and application crash) or potentially execute arbitrary code via the Bezier data in a crafted PDF file.
CVE-2016-6168	Foxitsoftware Reader	Hig	0.51	7.8	0.03	Feb 7, 2018	Use-after-free vulnerability in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a crafted PDF file.
CVE-2017-15768	IrfanView Irfanview	Hig	0.51	7.8	0.01	Oct 22, 2017	IrfanView version 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file, related to "Data from Faulting Address controls Branch Selection starting at image000007f7_42060000+0x0000000000094113."
CVE-2017-15767	IrfanView Irfanview	Hig	0.51	7.8	0.01	Oct 22, 2017	IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at CADIMAGE+0x00000000003d5b52."
CVE-2017-14694	Foxitsoftware Reader	Hig	0.51	7.8	0.07	Sep 22, 2017	Foxit Reader 8.3.2.25013 and earlier and Foxit PhantomPDF 8.3.2.25013 and earlier, when running in single instance mode, allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow…
CVE-2017-14692	STDU Viewer Viewer	Hig	0.51	7.8	0.00	Sep 22, 2017	STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllGetClassObject+0x000000000000653b."
CVE-2017-14691	STDU Viewer Viewer	Hig	0.51	7.8	0.00	Sep 22, 2017	STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_773a0000!RtlAddAccessAllowedAce+0x000000000000027a."
CVE-2017-14690	STDU Viewer Viewer	Hig	0.51	7.8	0.00	Sep 22, 2017	STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x00000000000064e7."
CVE-2017-14689	STDU Viewer Viewer	Hig	0.51	7.8	0.00	Sep 22, 2017	STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at…
CVE-2017-14688	STDU Viewer Viewer	Hig	0.51	7.8	0.00	Sep 22, 2017	STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to a "Read Access Violation starting at STDUDjVuFile!DllUnregisterServer+0x000000000000d917."
CVE-2017-14310	STDU Viewer Viewer	Hig	0.51	7.8	0.00	Sep 11, 2017	STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000001869."
CVE-2017-14309	STDU Viewer Viewer	Hig	0.51	7.8	0.00	Sep 11, 2017	STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000006ec8."
CVE-2017-14308	STDU Viewer Viewer	Hig	0.51	7.8	0.00	Sep 11, 2017	STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000006ddd."
CVE-2017-14307	STDU Viewer Viewer	Hig	0.51	7.8	0.00	Sep 11, 2017	STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77400000!TpAllocCleanupGroup+0x0000000000000402."
CVE-2017-14306	STDU Viewer Viewer	Hig	0.51	7.8	0.00	Sep 11, 2017	STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000006e10."
CVE-2017-14305	STDU Viewer Viewer	Hig	0.51	7.8	0.00	Sep 11, 2017	STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at STDUJBIG2File!DllUnregisterServer+0x0000000000005578."

CVE-2019-6767HigJun 3, 2019
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.04
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6765HigJun 3, 2019
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.03
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6764HigJun 3, 2019
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.03
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6763HigJun 3, 2019
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.03
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6762HigJun 3, 2019
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.03
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6761HigJun 3, 2019
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.03
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.0.16811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6760HigJun 3, 2019
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.03
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.16811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6759HigJun 3, 2019
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.03
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.3.10826. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6757HigJun 3, 2019
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.04
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.16811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6755HigJun 3, 2019
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.03
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.3.10826. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6754HigJun 3, 2019
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.05
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.3.10826. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6751HigJun 3, 2019
Foxitsoftware
Foxit Studio Photo
risk 0.51cvss 7.8epss 0.03
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo 3.6.6.779. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6750HigJun 3, 2019
Foxitsoftware
Foxit Studio Photo
risk 0.51cvss 7.8epss 0.03
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo 3.6.6. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6749HigJun 3, 2019
Foxitsoftware
Foxit Studio Photo
risk 0.51cvss 7.8epss 0.03
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo 3.6.6. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6748HigJun 3, 2019
Foxitsoftware
Foxit Studio Photo
risk 0.51cvss 7.8epss 0.03
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo 3.6.6. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-6747HigJun 3, 2019
Foxitsoftware
Foxit Studio Photo
risk 0.51cvss 7.8epss 0.03
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo 3.6.6. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
CVE-2019-8342HigMay 13, 2019
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.01
A Local Privilege Escalation in libqcocoa.dylib in Foxit Reader 3.1.0.0111 on macOS has been discovered due to an incorrect permission set.
CVE-2018-16297HigOct 8, 2018
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.03
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16292, CVE-2018-16293, CVE-2018-16294, CVE-2018-16295, and CVE-2018-16296. A specially…
CVE-2018-16296HigOct 8, 2018
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.03
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16292, CVE-2018-16293, CVE-2018-16294, CVE-2018-16295, and CVE-2018-16297. A specially…
CVE-2018-16295HigOct 8, 2018
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.03
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16292, CVE-2018-16293, CVE-2018-16294, CVE-2018-16296, and CVE-2018-16297. A specially…
CVE-2018-16294HigOct 8, 2018
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.03
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16292, CVE-2018-16293, CVE-2018-16295, CVE-2018-16296, and CVE-2018-16297. A specially…
CVE-2018-16293HigOct 8, 2018
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.03
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16292, CVE-2018-16294, CVE-2018-16295, CVE-2018-16296, and CVE-2018-16297. A specially…
CVE-2018-16292HigOct 8, 2018
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.03
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16293, CVE-2018-16294, CVE-2018-16295, CVE-2018-16296, and CVE-2018-16297. A specially…
CVE-2018-16291HigOct 8, 2018
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.03
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16292, CVE-2018-16293, CVE-2018-16294, CVE-2018-16295, CVE-2018-16296, and CVE-2018-16297. A specially…
CVE-2018-3967HigOct 3, 2018
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.06
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker…
CVE-2018-3966HigOct 3, 2018
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.06
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker…
CVE-2018-3965HigOct 3, 2018
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.06
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker…
CVE-2018-3964HigOct 3, 2018
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.09
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker…
CVE-2018-3961HigOct 2, 2018
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.02
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Creator property of the this.info object. An attacker needs to trick the user to open the malicious…
CVE-2018-3960HigOct 2, 2018
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.02
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Producer property of the this.info object. An attacker needs to trick the user to open the malicious…
CVE-2018-3959HigOct 2, 2018
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.02
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Author property of the this.info object. An attacker needs to trick the user to open the malicious file…
CVE-2018-3958HigOct 2, 2018
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.03
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Subject property of the this.info object. An attacker needs to trick the user to open the malicious…
CVE-2018-3957HigOct 2, 2018
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.03
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Keywords property of the this.info object. An attacker needs to trick the user to open the malicious…
CVE-2018-10302HigApr 23, 2018
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.03
A use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to execute arbitrary code, aka iDefense ID V-jyb51g3mv9.
CVE-2016-6169HigFeb 7, 2018
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.05
Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service (memory corruption and application crash) or potentially execute arbitrary code via the Bezier data in a crafted PDF file.
CVE-2016-6168HigFeb 7, 2018
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.03
Use-after-free vulnerability in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a crafted PDF file.
CVE-2017-15768HigOct 22, 2017
IrfanView
Irfanview
risk 0.51cvss 7.8epss 0.01
IrfanView version 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file, related to "Data from Faulting Address controls Branch Selection starting at image000007f7_42060000+0x0000000000094113."
CVE-2017-15767HigOct 22, 2017
IrfanView
Irfanview
risk 0.51cvss 7.8epss 0.01
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at CADIMAGE+0x00000000003d5b52."
CVE-2017-14694HigSep 22, 2017
Foxitsoftware
Reader
risk 0.51cvss 7.8epss 0.07
Foxit Reader 8.3.2.25013 and earlier and Foxit PhantomPDF 8.3.2.25013 and earlier, when running in single instance mode, allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow…
CVE-2017-14692HigSep 22, 2017
STDU Viewer
Viewer
risk 0.51cvss 7.8epss 0.00
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllGetClassObject+0x000000000000653b."
CVE-2017-14691HigSep 22, 2017
STDU Viewer
Viewer
risk 0.51cvss 7.8epss 0.00
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_773a0000!RtlAddAccessAllowedAce+0x000000000000027a."
CVE-2017-14690HigSep 22, 2017
STDU Viewer
Viewer
risk 0.51cvss 7.8epss 0.00
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x00000000000064e7."
CVE-2017-14689HigSep 22, 2017
STDU Viewer
Viewer
risk 0.51cvss 7.8epss 0.00
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at…
CVE-2017-14688HigSep 22, 2017
STDU Viewer
Viewer
risk 0.51cvss 7.8epss 0.00
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to a "Read Access Violation starting at STDUDjVuFile!DllUnregisterServer+0x000000000000d917."
CVE-2017-14310HigSep 11, 2017
STDU Viewer
Viewer
risk 0.51cvss 7.8epss 0.00
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000001869."
CVE-2017-14309HigSep 11, 2017
STDU Viewer
Viewer
risk 0.51cvss 7.8epss 0.00
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000006ec8."
CVE-2017-14308HigSep 11, 2017
STDU Viewer
Viewer
risk 0.51cvss 7.8epss 0.00
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000006ddd."
CVE-2017-14307HigSep 11, 2017
STDU Viewer
Viewer
risk 0.51cvss 7.8epss 0.00
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77400000!TpAllocCleanupGroup+0x0000000000000402."
CVE-2017-14306HigSep 11, 2017
STDU Viewer
Viewer
risk 0.51cvss 7.8epss 0.00
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000006e10."
CVE-2017-14305HigSep 11, 2017
STDU Viewer
Viewer
risk 0.51cvss 7.8epss 0.00
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at STDUJBIG2File!DllUnregisterServer+0x0000000000005578."

Page 16 of 24