Filtered by vendor Foxitsoftware Subscriptions
Total 805 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2017-16814 1 Foxitsoftware 1 Mobilepdf 2024-11-21 N/A
A Directory Traversal issue was discovered in the Foxit MobilePDF app before 6.1 for iOS. This occurs by abusing the URL + escape character during a Wi-Fi transfer, which could be exploited by attackers to bypass intended restrictions on local application files.
CVE-2017-16813 1 Foxitsoftware 1 Mobilepdf 2024-11-21 N/A
A denial-of-service issue was discovered in the Foxit MobilePDF app before 6.1 for iOS. This occurs when a user uploads a file that includes a hexadecimal Unicode character in the "filename" parameter via Wi-Fi, since the app could fail to parse this.
CVE-2016-6169 1 Foxitsoftware 2 Foxit Reader, Phantompdf 2024-11-21 N/A
Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service (memory corruption and application crash) or potentially execute arbitrary code via the Bezier data in a crafted PDF file.
CVE-2016-6168 1 Foxitsoftware 2 Foxit Reader, Phantompdf 2024-11-21 N/A
Use-after-free vulnerability in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a crafted PDF file.
CVE-2024-41605 1 Foxitsoftware 1 Foxit Pdf Editor 2024-09-30 8.4 High
In Foxit PDF Reader before 2024.3, and PDF Editor before 2024.3 and 13.x before 13.1.4, an attacker can replace an update file with a Trojan horse via side loading, because the update service lacks integrity validation for the updater. Attacker-controlled code may thus be executed.