Vulnerabilities > Foxitsoftware > Phantompdf

DATE CVE VULNERABILITY TITLE RISK
2020-09-04 CVE-2020-12247 Out-of-bounds Read vulnerability in Foxitsoftware Phantompdf
In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information from an out-of-bounds read because a text-string index continues to be used after splitting a string into two parts.
local
low complexity
foxitsoftware CWE-125
7.1
2020-09-04 CVE-2020-11493 Insufficient Verification of Data Authenticity vulnerability in Foxitsoftware Phantompdf
In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information about an uninitialized object because of direct transformation from PDF Object to Stream without concern for a crafted XObject.
network
low complexity
foxitsoftware CWE-345
8.1
2020-08-20 CVE-2020-15638 Unspecified vulnerability in Foxitsoftware Phantompdf
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.2.29539.
local
low complexity
foxitsoftware
7.8
2020-08-20 CVE-2020-15637 Unspecified vulnerability in Foxitsoftware Phantompdf
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511.
local
low complexity
foxitsoftware
3.3
2020-06-04 CVE-2019-20837 Improper Verification of Cryptographic Signature vulnerability in Foxitsoftware Phantompdf
An issue was discovered in Foxit Reader and PhantomPDF before 9.5.
network
low complexity
foxitsoftware CWE-347
7.5
2020-06-04 CVE-2019-20836 Information Exposure vulnerability in Foxitsoftware Phantompdf
An issue was discovered in Foxit Reader and PhantomPDF before 9.5.
network
low complexity
foxitsoftware CWE-200
7.5
2020-06-04 CVE-2019-20835 Unspecified vulnerability in Foxitsoftware Phantompdf
An issue was discovered in Foxit Reader and PhantomPDF before 9.5.
network
low complexity
foxitsoftware
4.3
2020-06-04 CVE-2019-20834 Improper Verification of Cryptographic Signature vulnerability in Foxitsoftware Phantompdf
An issue was discovered in Foxit PhantomPDF before 8.3.10.
network
low complexity
foxitsoftware CWE-347
7.5
2020-06-04 CVE-2019-20833 Improper Authentication vulnerability in Foxitsoftware Phantompdf
An issue was discovered in Foxit PhantomPDF before 8.3.10.
network
low complexity
foxitsoftware CWE-287
7.5
2020-06-04 CVE-2019-20832 Unspecified vulnerability in Foxitsoftware Phantompdf
An issue was discovered in Foxit PhantomPDF before 8.3.10.
network
low complexity
foxitsoftware
4.3