Skip to content
OpenAdvisories
Medium WID-SEC-2023-2996 19 CVEs

Foxit PDF Editor und Foxit Reader: Mehrere Schwachstellen

Published Nov 22, 2023 · Updated Dec 20, 2023 · Revision 2 · de-DE

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Foxit PDF Editor und Foxit Reader ausnutzen, um beliebigen Programmcode auszuführen und um Informationen offenzulegen.

Product

Foxit PDF Editor ist ein Tool zur Bearbeitung von PDF-Dateien.
Foxit Reader ist ein PDF Reader.

Vulnerabilities 19

  • High 8.8

    A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D annotations. A specially crafted …

  • High 8.8
    CVE-2023-35985 Public exploit

    An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due…

  • High 8.8

    A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles a signature field. A specially craft…

  • High 8.8

    An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due…

  • High 8.8

    A type confusion vulnerability exists in the way Foxit Reader 12.1.2.15356 handles field value properties. A specially …

  • High 7.8

    Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabi…

  • High 7.8

    Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabil…

  • High 7.8

    Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabil…

  • High 7.8

    Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in…

  • High 7.8

    Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in…

  • High 7.8

    Foxit PDF Reader Annotation Type Confusion Remote Code Execution Vulnerability

    Foxit PDF Reader Annotation Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in t…

  • Low 3.3

    Foxit PDF Reader combobox Out-Of-Bounds Read Information Disclosure Vulnerability

    Foxit PDF Reader combobox Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnera…

  • Low 3.3

    Foxit PDF Reader Bookmark Out-Of-Bounds Read Information Disclosure Vulnerability

    Foxit PDF Reader Bookmark Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnera…

  • Low 3.3

    Foxit PDF Reader Signature Use-After-Free Information Disclosure Vulnerability

    Foxit PDF Reader Signature Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabil…

  • Low 3.3

    Foxit PDF Reader Doc Out-Of-Bounds Read Information Disclosure Vulnerability

    Foxit PDF Reader Doc Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabilit…

  • Low 3.3

    Foxit PDF Reader AcroForm Doc Out-Of-Bounds Read Information Disclosure Vulnerability

    Foxit PDF Reader AcroForm Doc Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vul…

  • Low 3.3

    Foxit PDF Reader Doc Out-Of-Bounds Read Remote Code Execution Vulnerability

    Foxit PDF Reader Doc Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that…

  • Low 3.3

    Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

    Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this…

  • Low 3.3

    Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability

    Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnera…

Revision history

  1. #2

    CVE's ergänzt

  2. #1

    Initiale Fassung

References