Vulnerabilities

TI-2018-13767 CVE-2018-19444 · GHSA-5m9c-2qvm-g4pf

A use after free in the TextBox field Validate action in IReader_ContentProvider can…

LOW 39

A use after free in the TextBox field Validate action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02448 Published 2019-06-17 No fix listed CWE-416

TI-2018-13768 CVE-2018-19445 · GHSA-5fx6-gr9q-r6cw

A command injection can occur for specially crafted PDF files in Foxit Reader SDK…

LOW 39

A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API app.launchURL is used.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02642 Published 2019-06-17 No fix listed CWE-77

TI-2018-13769 CVE-2018-19446 · GHSA-3x6x-hm66-23q2

A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX)…

LOW 38

A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.createDataObject is used.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02208 Published 2019-06-17 No fix listed CWE-732

TI-2018-13770 CVE-2018-19447 · GHSA-4xh9-c7jc-9fc5

A stack-based buffer overflow can occur for specially crafted PDF files in Foxit Reader…

MEDIUM 42

A stack-based buffer overflow can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing the URI string.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.04896 Published 2019-06-17 No fix listed CWE-787

TI-2018-13771 CVE-2018-19448 · GHSA-g7p5-r9hg-fxmh

In Foxit Reader SDK (ActiveX) Professional 5.4.0.1031, an uninitialized object in…

LOW 38

In Foxit Reader SDK (ActiveX) Professional 5.4.0.1031, an uninitialized object in IReader_ContentProvider::GetDocEventHandler occurs when embedding the control into Office documents.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02241 Published 2019-06-17 No fix listed CWE-787

TI-2018-13772 CVE-2018-19449 · GHSA-xw45-3pj3-v733

A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX)…

LOW 39

A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.exportAsFDF is used.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02329 Published 2019-06-17 No fix listed CWE-787

TI-2018-13773 CVE-2018-19450 · GHSA-vq4h-422r-cp5j

A command injection can occur for specially crafted PDF files in Foxit Reader SDK…

LOW 38

A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing a launch action.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0211 Published 2019-06-17 No fix listed CWE-77

TI-2018-13774 CVE-2018-19451 · GHSA-cq3v-p3q3-xr33

A command injection can occur for specially crafted PDF files in Foxit Reader SDK…

LOW 39

A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when using the Open File action on a Field.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02706 Published 2019-06-07 No fix listed CWE-77

TI-2018-13775 CVE-2018-19452 · GHSA-3qgg-5wf9-23cw

A use after free in the TextBox field Mouse Enter action in IReader_ContentProvider can…

LOW 39

A use after free in the TextBox field Mouse Enter action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02898 Published 2019-06-07 No fix listed CWE-416

TI-2014-06691 CVE-2014-8074 · GHSA-cpcx-jm66-9h66

Buffer overflow in the SetLogFile method in Foxit.FoxitPDFSDKProCtrl.5 in Foxit PDF SDK…

LOW 36

Buffer overflow in the SetLogFile method in Foxit.FoxitPDFSDKProCtrl.5 in Foxit PDF SDK ActiveX 2.3 through 5.0.1820 before 5.0.2.924 allows remote attackers to execute arbitrary code via a long string, related to global…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03724 Published 2014-10-17 No fix listed CWE-119

Vulnerabilities

Filters