cbcvebase.

Foxitsoftware Reader vulnerabilities

259 known vulnerabilities affecting foxitsoftware/reader.

Total CVEs
259
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL11HIGH228MEDIUM13LOW7

Vulnerabilities

Page 4 of 13
CVE-2018-17698P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17698 [HIGH] CWE-416 CVE-2018-17698: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the richValue property of a text field. The i
nvd
CVE-2018-17688P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17688 [HIGH] CWE-416 CVE-2018-17688: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the setItems method of a ComboBox. The issue
nvd
CVE-2018-17702P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17702 [HIGH] CWE-416 CVE-2018-17702: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the richValue property of button objects. The iss
nvd
CVE-2018-17696P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17696 [HIGH] CWE-416 CVE-2018-17696: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the dataObjects. The issue results from the lack
nvd
CVE-2018-17689P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17689 [HIGH] CWE-416 CVE-2018-17689: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the fillColor property of a radio button. The
nvd
CVE-2018-17682P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17682 [HIGH] CWE-416 CVE-2018-17682: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the delay property of Annotation objects. The iss
nvd
CVE-2018-17690P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17690 [HIGH] CWE-416 CVE-2018-17690: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the rect property of a Link object. The issue
nvd
CVE-2018-17680P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17680 [HIGH] CWE-416 CVE-2018-17680: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the style property of a Field object. The issue r
nvd
CVE-2018-17681P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17681 [HIGH] CWE-416 CVE-2018-17681: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the getPageBox method of a Form. The issue result
nvd
CVE-2018-17684P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17684 [HIGH] CWE-416 CVE-2018-17684: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the isPropertySpecified method. The issue results
nvd
CVE-2018-17617P3HIGHCVSS 8.8≤ 9.1.0.50962018-10-29
CVE-2018-17617 [HIGH] CWE-416 CVE-2018-17617: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of onFocus events. The issue results from the lack o
nvd
CVE-2018-17620P3HIGHCVSS 8.8≤ 9.2.0.92972018-10-29
CVE-2018-17620 [HIGH] CWE-416 CVE-2018-17620: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Calculate events. The issue results from the lack
nvd
CVE-2018-17619P3HIGHCVSS 8.8≤ 9.1.0.50962018-10-29
CVE-2018-17619 [HIGH] CWE-416 CVE-2018-17619: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Validate events. The issue results from the lack
nvd
CVE-2018-17616P3HIGHCVSS 8.8≤ 9.2.0.92972018-10-29
CVE-2018-17616 [HIGH] CWE-416 CVE-2018-17616: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of onBlur events. The issue results from the lack of
nvd
CVE-2018-17679P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17679 [HIGH] CWE-416 CVE-2018-17679: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF documents. By manipulating a document's elemen
nvd
CVE-2018-17636P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17636 [HIGH] CWE-416 CVE-2018-17636: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the id property of a aliasNode. The issue results
nvd
CVE-2018-17683P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17683 [HIGH] CWE-416 CVE-2018-17683: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the createIcon method of an app object. The issue
nvd
CVE-2018-17621P3HIGHCVSS 8.8≤ 9.1.0.50962018-10-29
CVE-2018-17621 [HIGH] CWE-416 CVE-2018-17621: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Format events. The issue results from the lack of
nvd
CVE-2018-17673P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17673 [HIGH] CWE-416 CVE-2018-17673: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the subtype property of a Annotation object. The
nvd
CVE-2018-17672P3HIGHCVSS 8.8≤ 9.2.0.92972019-01-24
CVE-2018-17672 [HIGH] CWE-416 CVE-2018-17672: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of array indices. The issue results from the lack of
nvd
Foxitsoftware Reader vulnerabilities | cvebase