Skip to content
OpenAdvisories
High WID-SEC-2023-0028 9 CVEs

Foxit Phantom PDF Suite: Mehrere Schwachstellen

Published Jan 4, 2023 · Updated Jan 4, 2023 · de-DE

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Foxit Phantom PDF Suite ausnutzen, um Code auszuführen, Informationen offenzulegen und einen Denial of Service zu verursachen.

Product

Phantom PDF Suite ist ein Toolkit zur Erstellung von PDFs.

Vulnerabilities 9

  • High 8.8

    A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By…

  • High 8.8
    CVE-2022-37332 Public exploit

    A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A …

  • High 8.8

    A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By…

  • High 8.8

    A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A …

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0…

  • Low 3.3

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Rea…

  • Low 3.3

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Rea…

Revision history

  1. #1

    Initiale Fassung

References