DeutschShown in its original language — a full translation is planned for a future version.
Foxit Reader: Mehrere Schwachstellen
view advisory published 2022-05-08
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Foxit Reader und Foxit PDF Editor ausnutzen, um beliebigen Programmcode auszuführen, um falsche Informationen darzustellen und um einen Denial of Service Zustand herbeizuführen.
01
describes (17)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-25641US | medium5.5 | — | ||
Foxit PDF Reader before 11.2.2 and PDF Editor before 11.2.2, and PhantomPDF before 10.1.8, mishandle cross-reference information during compressed-object parsing within signed docu… | ||||
| CVE-2022-28683US | high7.8 | — | ||
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulner… | ||||
| CVE-2022-28682US | high7.8 | — | ||
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulner… | ||||
| CVE-2022-28681US | medium6.1 | — | ||
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit thi… | ||||
| CVE-2022-28680US | high7.8 | — | ||
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulner… | ||||
| CVE-2022-28679US | high7.8 | — | ||
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulner… | ||||
| CVE-2022-28678US | high7.8 | — | ||
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulner… | ||||
| CVE-2022-28677US | high7.8 | — | ||
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulner… | ||||
| CVE-2022-28676US | high7.8 | — | ||
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulner… | ||||
| CVE-2022-28675US | high7.8 | — | ||
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulner… | ||||
| CVE-2022-28674US | high7.8 | — | ||
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulner… | ||||
| CVE-2022-28673US | high7.8 | — | ||
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulner… | ||||
| CVE-2022-28672US | high7.8 | Exploit | ||
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulner… | ||||
| CVE-2022-28671US | high7.8 | — | ||
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulner… | ||||
| CVE-2022-28670US | high7.8 | — | ||
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit thi… | ||||
| CVE-2022-28669US | high7.8 | — | ||
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulner… | ||||
| CVE-2022-30557US | high7.5 | — | ||
Foxit PDF Reader and PDF Editor before 11.2.2 have a Type Confusion issue that causes a crash because of Unsigned32 mishandling during JavaScript execution. | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan