Количество 3
Количество 3
CVE-2020-13570
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger the reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
GHSA-m9mx-fh6q-cw99
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger the reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
BDU:2020-05907
Уязвимость программы для просмотра текста Foxit Reader и программы редактирования PDF-файлов Foxit PhantomPDF, связанная с использованием после освобождения, позволяющая нарушителю выполнить произвольный код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-13570 A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger the reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability. | CVSS3: 8.8 | 5% Низкий | около 5 лет назад |
| GHSA-m9mx-fh6q-cw99 A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger the reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability. | CVSS3: 8.8 | 5% Низкий | больше 3 лет назад |
 | BDU:2020-05907 Уязвимость программы для просмотра текста Foxit Reader и программы редактирования PDF-файлов Foxit PhantomPDF, связанная с использованием после освобождения, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.8 | 5% Низкий | около 5 лет назад |
Уязвимостей на страницу