cbcvebase.

Foxitsoftware Reader vulnerabilities

259 known vulnerabilities affecting foxitsoftware/reader.

Total CVEs
259
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL11HIGH228MEDIUM13LOW7

Vulnerabilities

Page 3 of 13
CVE-2018-17659P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17659 [HIGH] CWE-416 CVE-2018-17659: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the title property of a Host object. The issue re
nvd
CVE-2018-17658P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17658 [HIGH] CWE-416 CVE-2018-17658: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the respose property of a host object. The issue
nvd
CVE-2018-17653P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17653 [HIGH] CWE-416 CVE-2018-17653: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the resolveNode method of a TimeField. The issue
nvd
CVE-2018-17662P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17662 [HIGH] CWE-416 CVE-2018-17662: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the beep method of a Host object. The issue resul
nvd
CVE-2018-17626P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17626 [HIGH] CWE-416 CVE-2018-17626: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the Validate events of TextBox objects. The issue
nvd
CVE-2018-17629P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17629 [HIGH] CWE-416 CVE-2018-17629: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of template objects. The issue results from the lack
nvd
CVE-2018-17639P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17639 [HIGH] CWE-416 CVE-2018-17639: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the setElement method. The issue results from the
nvd
CVE-2018-17670P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17670 [HIGH] CWE-416 CVE-2018-17670: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the content property of a XFA object. The issue r
nvd
CVE-2018-17640P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17640 [HIGH] CWE-416 CVE-2018-17640: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the Form count property. The issue results from t
nvd
CVE-2018-17634P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17634 [HIGH] CWE-416 CVE-2018-17634: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the attachIcon property of Annotation objects. Th
nvd
CVE-2018-17660P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17660 [HIGH] CWE-416 CVE-2018-17660: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the resetData method of a Host object. The issue
nvd
CVE-2018-17643P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17643 [HIGH] CWE-416 CVE-2018-17643: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the editValue property of a TimeField. The issue
nvd
CVE-2018-17697P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17697 [HIGH] CWE-416 CVE-2018-17697: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of templates. The issue results from the lack of val
nvd
CVE-2018-17687P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17687 [HIGH] CWE-416 CVE-2018-17687: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the exportValues property of a radio button.
nvd
CVE-2018-17691P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17691 [HIGH] CWE-416 CVE-2018-17691: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of HTML files to PDF. The issue results from t
nvd
CVE-2018-17694P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17694 [HIGH] CWE-416 CVE-2018-17694: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the display property of a button. The issue r
nvd
CVE-2018-17704P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17704 [HIGH] CWE-416 CVE-2018-17704: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the textColor property of RadioButton objects. Th
nvd
CVE-2018-17695P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17695 [HIGH] CWE-416 CVE-2018-17695: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the username property of a TextField. The iss
nvd
CVE-2018-17703P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17703 [HIGH] CWE-416 CVE-2018-17703: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the defaultValue property of ComboBox objects. Th
nvd
CVE-2018-17705P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17705 [HIGH] CWE-416 CVE-2018-17705: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the display property of CheckBox objects. The iss
nvd
Foxitsoftware Reader vulnerabilities | cvebase