Foxit Phantompdf Luki w zabezpieczeniach

Wersja

9.0	34
9.1	34
9.2	32
8.3.0	28
8.3.1	28

Przeciwdziałanie

Official Fix	122
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	64

Wykorzystywanie

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	186

Wektor dostępu

Not Defined	0
Physical	0
Local	6
Adjacent	0
Network	180

Uwierzytelnianie

Not Defined	0
High	0
Low	10
None	176

Interakcja z użytkownikiem

Not Defined	0
Required	144
None	42

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	14
≤5	6
≤6	24
≤7	64
≤8	74
≤9	4
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	14
≤5	6
≤6	36
≤7	52
≤8	74
≤9	4
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	42
≤6	26
≤7	102
≤8	14
≤9	2
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	14
≤5	0
≤6	10
≤7	8
≤8	100
≤9	18
≤10	24

CNA

≤1	0
≤2	0
≤3	0
≤4	8
≤5	0
≤6	0
≤7	0
≤8	28
≤9	0
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	20
<2k	112
<5k	54
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	176
<2k	10
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (52): 3.0, 3.1, 3.2, 3.3, 4.0, 8.3, 8.3.1, 8.3.2, 8.3.3, 8.3.4, 8.3.5, 8.3.6, 8.3.7, 8.3.8, 8.3.9, 8.3.11, 9.0, 9.1, 9.1.5096, 9.2, 9.2.0.9297, 9.3, 9.3.10826, 9.4, 9.4.1, 9.4.1.16828, 9.5, 9.5.0.20723, 9.5.0.20732, 9.6, 9.6.0.25114, 9.7, 9.7, 9.7.0.29478, 9.7.1, 9.7.1, 9.7.1.29511, 9.7.2, 9.7.2, 9.7.2.29539, 9.7.3, 9.7.3, 9.7.4, 9.7.4, 10.0, 10.0.0.35798, 10.1, 10.1.0.37527, 10.1.1, 10.1.2, 10.1.3, 10.1.3.37598

Link to Product Website: https://www.foxitsoftware.com/

Typ oprogramowania: Document Reader Software

Opublikowano	Base	Temp	Słaby punkt	0day	Dzisiaj	Wyk	Prz	CTI	CVE
2022-08-29	4.3	4.2	Foxit PDF Reader/PhantomPDF Compressed Object Parser weak encryption	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2022-25641
2022-08-29	7.0	6.9	Foxit PDF Reader/PDF Editor/PhantomPDF Javascript memory corruption	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-41785
2022-08-29	7.0	6.9	Foxit PDF Reader/PDF Editor/PhantomPDF Javascript memory corruption	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2021-41784
2022-08-29	7.0	6.9	Foxit PDF Reader/PDF Editor/PhantomPDF Javascript memory corruption	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-41783
2022-08-29	7.0	6.9	Foxit PDF Reader/PDF Editor/PhantomPDF Javascript memory corruption	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-41782
2022-08-29	7.0	6.9	Foxit PDF Reader/PDF Editor/PhantomPDF Javascript memory corruption	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-41781
2022-08-29	7.0	6.9	Foxit PDF Reader/PDF Editor/PhantomPDF memory corruption	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-41780
2022-08-29	5.5	5.4	Foxit PDF Reader/PDF Editor/PhantomPDF Signed Document weak authentication	$0-$5k	$0-$5k	Not Defined	Official Fix	0.05	CVE-2021-40326
2022-03-11	4.3	4.1	Foxit PDF Reader/PhantomPDF PDF Parser denial of service	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-25108
2021-08-12	8.0	7.7	Foxit Reader/PhantomPDF Office Document memory corruption	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-33793
2021-08-12	8.0	7.7	Foxit Reader/PhantomPDF sql injection	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-38574
2021-08-12	8.0	7.7	Foxit Reader/PhantomPDF Pathname CombineFiles Remote Code Execution	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-38573
2021-08-12	7.6	7.3	Foxit Reader/PhantomPDF Pathname extractPages	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2021-38572
2021-08-12	7.0	6.7	Foxit Reader/PhantomPDF privilege escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.05	CVE-2021-38571
2021-08-12	7.2	6.9	Foxit PhantomPDF/Reader Installation privilege escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-38570
2021-08-12	5.9	5.6	Foxit PhantomPDF/Reader XFA Form denial of service	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-38569
2021-08-12	8.0	7.7	Foxit PhantomPDF/Reader PDF Document memory corruption	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-38568
2021-08-12	7.7	7.3	Foxit Reader/PhantomPDF XFA Form Remote Code Execution	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-33794
2021-07-10	5.2	5.0	Foxit Reader/PhantomPDF PDF Document weak authentication	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-33795
2021-07-10	7.0	6.7	Foxit Reader/PhantomPDF Trailer Dictionary memory corruption	$0-$5k	$0-$5k	Not Defined	Official Fix	0.05	CVE-2021-33792
2021-06-17	6.3	6.3	Foxit PhantomPDF XFA Template privilege escalation	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2021-31476
2021-03-30	7.0	7.0	Foxit PhantomPDF U3D Object memory corruption	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2021-27271
2021-03-30	7.0	7.0	Foxit PhantomPDF JPEG2000 Images information disclosure	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2021-27270
2021-03-30	7.0	7.0	Foxit PhantomPDF U3D Object memory corruption	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2021-27269
2021-03-30	7.0	7.0	Foxit PhantomPDF U3D Object memory corruption	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2021-27268

160 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 160 results.

więcej wpisów autorstwa Foxit

◂ PoprzedniPrzeglądKolejny ▸

Do you need the next level of professionalism?

Upgrade your account now!