Vulnerabilities > Foxitsoftware

DATE CVE VULNERABILITY TITLE RISK
2016-04-22 CVE-2016-4061 Improper Input Validation vulnerability in Foxitsoftware Foxit Reader and Phantompdf
Foxit Reader and PhantomPDF before 7.3.4 on Windows allow remote attackers to cause a denial of service (application crash) via a crafted content stream.
network
low complexity
foxitsoftware CWE-20
7.5
2016-04-22 CVE-2016-4060 Unspecified vulnerability in Foxitsoftware Foxit Reader and Phantompdf
Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
network
low complexity
foxitsoftware
7.5
2016-04-22 CVE-2016-4059 Unspecified vulnerability in Foxitsoftware Foxit Reader and Phantompdf
Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted FlateDecode stream in a PDF document.
local
low complexity
foxitsoftware
7.8
2016-04-13 CVE-2015-8843 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Foxitsoftware Foxit Reader
The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local users to gain privileges by writing crafted data to a shared memory region, which triggers memory corruption.
local
high complexity
foxitsoftware CWE-119
7.4