foxitsoftware Vulnerability Advisory Catalog

Total 770 security vulnerabilities recorded for foxitsoftware software and firmware.

← Back to All Vendors
Component: foxit_reader

Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to cause a denial of service (application ...

📅 2016-04-22
CVSS 7.5 Dossier →
Component: foxit_reader

Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted Fl...

📅 2016-04-22
CVSS 7.8 Dossier →
Component: foxit_reader

The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is...

📅 2016-04-13
CVSS 7.4 Dossier →
CVE-2015-8580 UNKNOWN
Component: foxit_reader

Multiple use-after-free vulnerabilities in the (1) Print method and (2) App object handling in Foxit Reader before 7.2.2 and Foxit PhantomPDF before 7...

📅 2015-12-16
CVSS 6.8 Dossier →
CVE-2015-3633 UNKNOWN
Component: enterprise_reader

Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a denial of service (memory corruption and crash) via vec...

📅 2015-05-01
CVSS 5.0 Dossier →
CVE-2015-3632 UNKNOWN
Component: enterprise_reader

Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a denial of service (memory corruption and crash) via a c...

📅 2015-05-01
CVSS 4.3 Dossier →
CVE-2015-2790 UNKNOWN
Component: enterprise_reader

Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a cra...

📅 2015-03-30
CVSS 4.3 Dossier →
CVE-2015-2789 UNKNOWN
Component: foxit_reader

Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows lo...

📅 2015-03-30
CVSS 4.4 Dossier →
CVE-2014-8074 UNKNOWN
Component: foxit_pdf_sdk_activex

Buffer overflow in the SetLogFile method in Foxit.FoxitPDFSDKProCtrl.5 in Foxit PDF SDK ActiveX 2.3 through 5.0.1820 before 5.0.2.924 allows remote at...

📅 2014-10-17
CVSS 6.8 Dossier →
CVE-2014-6853 UNKNOWN
Component: foxit_mobilepdf_-_pdf_reader

The Foxit MobilePDF - PDF Reader (aka com.foxit.mobile.pdf.lite) application 2.2.0.0616 for Android does not verify X.509 certificates from SSL server...

📅 2014-10-01
CVSS 5.4 Dossier →
CVE-2014-4646 UNKNOWN
Component: foxit_pdf_sdk_dll

Buffer overflow in the FPDFBookmark_GetTitle method in Foxit PDF SDK DLL before 3.1.1.5005 allows context-dependent attackers to execute arbitrary cod...

📅 2014-07-07
CVSS 6.8 Dossier →
CVE-2013-0107 UNKNOWN
Component: foxit_advanced_pdf_editor

Stack-based buffer overflow in Foxit Advanced PDF Editor 3 before 3.04 might allow remote attackers to execute arbitrary code via a crafted document c...

📅 2013-01-26
CVSS 7.6 Dossier →
CVE-2012-4759 UNKNOWN
Component: foxit_reader

Untrusted search path vulnerability in facebook_plugin.fpi in the Facebook plug-in in Foxit Reader 5.3.1.0606 allows local users to gain privileges vi...

📅 2012-09-06
CVSS 6.9 Dossier →
CVE-2012-4337 UNKNOWN
Component: foxit_reader

Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF document with a crafted attachment tha...

📅 2012-08-23
CVSS 9.3 Dossier →
CVE-2011-3691 UNKNOWN
Component: foxit_reader

Untrusted search path vulnerability in Foxit Reader before 5.0.2.0718 allows local users to gain privileges via a Trojan horse dwmapi.dll, dwrite.dll,...

📅 2011-09-27
CVSS 9.3 Dossier →
CVE-2011-1908 UNKNOWN
Component: foxit_reader

Integer overflow in the Type 1 font decoder in the FreeType engine in Foxit Reader before 4.0.0.0619 allows remote attackers to execute arbitrary code...

📅 2011-06-24
CVSS 9.3 Dossier →
CVE-2011-0332 UNKNOWN
Component: foxit_reader

Integer overflow in Foxit Reader before 4.3.1.0218 and Foxit Phantom before 2.3.3.1112 allows remote attackers to execute arbitrary code via crafted I...

📅 2011-02-25
CVSS 9.3 Dossier →
CVE-2010-1239 UNKNOWN
Component: foxit_reader

Foxit Reader before 3.2.1.0401 allows remote attackers to (1) execute arbitrary local programs via a certain "/Type /Action /S /Launch" sequence, and ...

📅 2010-04-05
CVSS 9.3 Dossier →
CVE-2008-7225 UNKNOWN
Component: wac_server

Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of service (crash) ...

📅 2009-09-14
CVSS 10.0 Dossier →
CVE-2008-7031 UNKNOWN
Component: wac_server

Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of service (crash) ...

📅 2009-08-24
CVSS 10.0 Dossier →
CVE-2009-0691 UNKNOWN
Component: jpeg2000_jbig2_decoder_add-on

The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decod...

📅 2009-06-23
CVSS 9.3 Dossier →
CVE-2009-0690 UNKNOWN
Component: foxit_reader

The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a negative value for the s...

📅 2009-06-23
CVSS 9.3 Dossier →
CVE-2009-0836 UNKNOWN
Component: reader

Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing dangerous ...

📅 2009-03-10
CVSS 10.0 Dossier →
CVE-2009-0191 UNKNOWN
Component: foxit_reader

Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with...

📅 2009-03-10
CVSS 9.3 Dossier →
Page 32 of 33 (770 Total Records)