Foxit Phantompdf vulnerabilities

88 known vulnerabilities affecting foxit/phantompdf.

Total CVEs
88
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH68MEDIUM9LOW11

Vulnerabilities

Page 5 of 5
CVE-2018-17690HIGHCVSS 8.8v9.2.0.92972019-01-24
CVE-2018-17690 [HIGH] CWE-416 CVE-2018-17690: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the rect property of a Link object. The issue
cvelistv5nvd
CVE-2018-17691HIGHCVSS 8.8v9.2.0.92972019-01-24
CVE-2018-17691 [HIGH] CWE-416 CVE-2018-17691: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of HTML files to PDF. The issue results from t
cvelistv5nvd
CVE-2018-17701HIGHCVSS 8.8v9.2.0.92972019-01-24
CVE-2018-17701 [HIGH] CWE-125 CVE-2018-17701: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of JSON objects. The issue results from the lack
cvelistv5nvd
CVE-2018-17694HIGHCVSS 8.8v9.2.0.92972019-01-24
CVE-2018-17694 [HIGH] CWE-416 CVE-2018-17694: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the display property of a button. The issue r
cvelistv5nvd
CVE-2018-17695HIGHCVSS 8.8v9.2.0.92972019-01-24
CVE-2018-17695 [HIGH] CWE-416 CVE-2018-17695: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the username property of a TextField. The iss
cvelistv5nvd
CVE-2018-17692HIGHCVSS 8.8v9.2.0.92972019-01-24
CVE-2018-17692 [HIGH] CWE-787 CVE-2018-17692: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of HTML files to PDF. The issue results from t
cvelistv5nvd
CVE-2018-17698HIGHCVSS 8.8v9.2.0.92972019-01-24
CVE-2018-17698 [HIGH] CWE-416 CVE-2018-17698: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the richValue property of a text field. The i
cvelistv5nvd
CVE-2018-17688HIGHCVSS 8.8v9.2.0.92972019-01-24
CVE-2018-17688 [HIGH] CWE-416 CVE-2018-17688: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the setItems method of a ComboBox. The issue
cvelistv5nvd