Foxitsoftware

Records797All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical44CVSS 9.0–10.0

CVSS high620CVSS 7.0–8.9

Exploited now

Foxitsoftware records in CISA KEV

No Foxitsoftware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phantompdf 549 records HIGH Foxit Reader 372 records HIGH Reader 259 records HIGH Foxit Studio Photo 54 records MEDIUM Pdf Editor 28 records HIGH 3d 20 records MEDIUM Foxit Pdf Sdk Activex 10 records MEDIUM U3d 9 records MEDIUM

Records

10 records in Foxit Pdf Sdk Activex · all components

TI-2018-13770 CVE-2018-19447 · GHSA-4xh9-c7jc-9fc5

A stack-based buffer overflow can occur for specially crafted PDF files in Foxit Reader…

MEDIUM 42

A stack-based buffer overflow can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing the URI string.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.04896 Published 2019-06-17 No fix listed CWE-787

TI-2018-13775 CVE-2018-19452 · GHSA-3qgg-5wf9-23cw

A use after free in the TextBox field Mouse Enter action in IReader_ContentProvider can…

LOW 39

A use after free in the TextBox field Mouse Enter action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02898 Published 2019-06-07 No fix listed CWE-416

TI-2018-13774 CVE-2018-19451 · GHSA-cq3v-p3q3-xr33

A command injection can occur for specially crafted PDF files in Foxit Reader SDK…

LOW 39

A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when using the Open File action on a Field.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02706 Published 2019-06-07 No fix listed CWE-77

TI-2018-13772 CVE-2018-19449 · GHSA-xw45-3pj3-v733

A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX)…

LOW 39

A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.exportAsFDF is used.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02329 Published 2019-06-17 No fix listed CWE-787

TI-2018-13768 CVE-2018-19445 · GHSA-5fx6-gr9q-r6cw

A command injection can occur for specially crafted PDF files in Foxit Reader SDK…

LOW 39

A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API app.launchURL is used.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02642 Published 2019-06-17 No fix listed CWE-77

TI-2018-13767 CVE-2018-19444 · GHSA-5m9c-2qvm-g4pf

A use after free in the TextBox field Validate action in IReader_ContentProvider can…

LOW 39

A use after free in the TextBox field Validate action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02448 Published 2019-06-17 No fix listed CWE-416

TI-2018-13773 CVE-2018-19450 · GHSA-vq4h-422r-cp5j

A command injection can occur for specially crafted PDF files in Foxit Reader SDK…

LOW 38

A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing a launch action.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0211 Published 2019-06-17 No fix listed CWE-77

TI-2018-13771 CVE-2018-19448 · GHSA-g7p5-r9hg-fxmh

In Foxit Reader SDK (ActiveX) Professional 5.4.0.1031, an uninitialized object in…

LOW 38

In Foxit Reader SDK (ActiveX) Professional 5.4.0.1031, an uninitialized object in IReader_ContentProvider::GetDocEventHandler occurs when embedding the control into Office documents.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02241 Published 2019-06-17 No fix listed CWE-787

TI-2018-13769 CVE-2018-19446 · GHSA-3x6x-hm66-23q2

A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX)…

LOW 38

A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.createDataObject is used.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02208 Published 2019-06-17 No fix listed CWE-732

TI-2014-06691 CVE-2014-8074 · GHSA-cpcx-jm66-9h66

Buffer overflow in the SetLogFile method in Foxit.FoxitPDFSDKProCtrl.5 in Foxit PDF SDK…

LOW 36

Buffer overflow in the SetLogFile method in Foxit.FoxitPDFSDKProCtrl.5 in Foxit PDF SDK ActiveX 2.3 through 5.0.1820 before 5.0.2.924 allows remote attackers to execute arbitrary code via a long string, related to global…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03724 Published 2014-10-17 No fix listed CWE-119

Open these records in search →

Critical	44
High	620
Medium	107
Low	26
No CVSS	0