FR
Product
Foxit Reader
372
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 264Medium 69Low 11
Watch
Add Foxit Reader to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-31444 | 3.3 | May 7 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576 Affected: through 10.1.3.37598 |
| CVE-2021-31443 | 3.3 | May 7 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576 Affected: through 10.1.3.37598 |
| CVE-2021-27266 | 3.3 | Mar 30 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527 Affected: through 10.1.0.37527 |
| CVE-2021-27265 | 3.3 | Mar 30 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527 Affected: through 10.1.0.37527 |
| CVE-2021-27264 | 3.3 | Mar 30 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527 Affected: through 10.1.0.37527 |
| CVE-2021-27263 | 3.3 | Mar 30 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527 Affected: through 10.1.0.37527 |
| CVE-2021-27262 | 3.3 | Mar 30 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527 Affected: through 10.1.0.37527 |
| CVE-2015-8580 | – | Dec 16 | Multiple use-after-free vulnerabilities in the (1) Print method and (2) App object handling in Foxit Reader before 7.2.2 and Foxit PhantomPDF before 7.2.2 allow remote attackers… Affected: through 7.2.0.722 |
| CVE-2015-3633 | – | May 1 | Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a denial of service (memory corruption and crash) via vectors related to digital… Affected: through 7.1.3.320; 7.1.0.306 |
| CVE-2015-3632 | – | May 1 | Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted GIF in a PDF file Affected: through 7.1.3.320 |
| CVE-2015-2790 | – | Mar 30 | Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1) Ubyte Size in a… Affected: through 7.0.6.1126 |
| CVE-2015-2789 | – | Mar 30 | Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges… Affected: 6.1; 6.1.2; 6.1.4; 6.2; 6.2.1; 7.0; +1 more |
| CVE-2012-4759 | – | Sep 6 | Untrusted search path vulnerability in facebook_plugin.fpi in the Facebook plug-in in Foxit Reader 5.3.1.0606 allows local users to gain privileges via a Trojan horse dwmapi.dll… Affected: 5.3.1.0606 |
| CVE-2012-4337 | – | Aug 23 | Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF document with a crafted attachment that triggers calculation of a… Affected: through 5.1.4.0104; 2.0; 2.3; 3.0; 3.1.2.1013; 3.1.2.1030; +13 more |
| CVE-2011-3691 | – | Sep 27 | Untrusted search path vulnerability in Foxit Reader before 5.0.2.0718 allows local users to gain privileges via a Trojan horse dwmapi.dll, dwrite.dll, or msdrm.dll in the current… Affected: through 5.0; 2.0; 2.2; 2.3; 3.0; 3.1; +10 more |
| CVE-2011-1908 | – | Jun 24 | Integer overflow in the Type 1 font decoder in the FreeType engine in Foxit Reader before 4.0.0.0619 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: through 4.0; 2.0; 2.2; 2.3; 3.0; 3.1; +6 more |
| CVE-2011-0332 | – | Feb 25 | Integer overflow in Foxit Reader before 4.3.1.0218 and Foxit Phantom before 2.3.3.1112 allows remote attackers to execute arbitrary code via crafted ICC chunks in a PDF file,… Affected: through 4.3; 2.0; 2.2; 2.3; 3.0; 3.1; +8 more |
| CVE-2010-1239 | – | Apr 5 | Foxit Reader before 3.2.1.0401 allows remote attackers to (1) execute arbitrary local programs via a certain "/Type /Action /S /Launch" sequence, and (2) execute arbitrary… Affected: through 3.2.0.0303; 2.3; 3.0; 3.1.0.0824; 3.1.1.0901; 3.1.1.0928; +1 more |
| CVE-2009-0691 | – | Jun 23 | The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 (aka JPX)… Affected: 3.0 |
| CVE-2009-0690 | – | Jun 23 | The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a negative value for the stream offset in a JPEG2000… Affected: 3.0; 3.0.2009.1301 |
| CVE-2009-0191 | – | Mar 10 | Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which… Affected: 2.3; 3.0; 3.0.2009.1301 |
| CVE-2008-1104 | – | May 21 | Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the… Affected: through 2.3; 2.0; 2.2 |