Vulnerabilities > Foxitsoftware > Reader > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-10-29 CVE-2018-17622 Out-of-bounds Read vulnerability in Foxitsoftware Phantompdf
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.1.0.5096.
network
low complexity
foxitsoftware CWE-125
6.5
2016-10-31 CVE-2016-8879 Out-of-bounds Write vulnerability in Foxitsoftware Phantompdf and Reader
The thumbnail shell extension plugin (FoxitThumbnailHndlr_x86.dll) in Foxit Reader and PhantomPDF before 8.1 on Windows allows remote attackers to cause a denial of service (out-of-bounds write and application crash) via a crafted JPEG2000 image embedded in a PDF document, aka an "Exploitable - Heap Corruption" issue.
network
low complexity
foxitsoftware CWE-787
6.5
2016-10-31 CVE-2016-8875 Out-of-bounds Read vulnerability in Foxitsoftware Phantompdf and Reader
The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted TIFF image, aka "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at ConvertToPDF_x86!CreateFXPDFConvertor."
network
high complexity
foxitsoftware CWE-125
5.3