Memory Corruption

Every one of the 137 is a mark on the map. Named now: 1 to 26, most at risk first.

1. A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of pr…CVE-2020-13557Foxitsoftware · CVSS 8.8 · 70% likely

   CWE-416

2. In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick t…CVE-2020-13548Foxitsoftware · CVSS 8 · 66% likely

   CWE-416

3. In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing a recursive page tree structure using the LoadFromFile, LoadF…CVE-2018-20247Foxitsoftware · 54% likely

   CWE-121

4. Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing dangerous actions defined in a PDF file…CVE-2009-0836Foxitsoftware · 43% likely

   CWE-119

5. Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.print…CVE-2008-1104Foxitsoftware · 23% likely

   CWE-119

6. Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf_x86.dll in Foxit Reader 7.3.4.311 allows remote attackers to execute arbitrary code via a large Sam…CVE-2016-3740Foxitsoftware · 15% likely

   CWE-119

7. Heap-based buffer overflow in Foxit WAC Server 2.1.0.910, 2.0 Build 3503, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a…CVE-2008-0151Foxitsoftware · 8.5% likely

   CWE-119

8. Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrar…CVE-2008-7031Foxitsoftware · 8.3% likely

   CWE-119

9. Foxit Reader 8.3.2.25013 and earlier and Foxit PhantomPDF 8.3.2.25013 and earlier, when running in single instance mode, allows attackers to execute arbitrary code or cause a deni…CVE-2017-14694Foxitsoftware · 7.1% likely

   CWE-119

10. Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted GIF in a PDF file.CVE-2015-3632Foxitsoftware · 6.0% likely

    CWE-119

11. Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrar…CVE-2008-7225Foxitsoftware · 5.5% likely

    CWE-119

12. Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service (memory corruption and application…CVE-2016-6169Foxitsoftware · 5.1% likely

    CWE-119

13. Foxit Reader before 8.3.1 and PhantomPDF before 8.3.1 have an Arbitrary Write vulnerability, which allows remote attackers to execute arbitrary code via a crafted document.CVE-2017-10994Foxitsoftware · 4.9% likely

    CWE-123

14. A stack-based buffer overflow can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing the URI string. An attacker can leverage this to gain…CVE-2018-19447Foxitsoftware · 4.9% likely

    CWE-787

15. Foxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free that leads to Remote Code Execution, aka V-88f4smlocs.CVE-2018-14442Foxitsoftware · 4.8% likely

    CWE-416

16. Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code vi…CVE-2017-8455Foxitsoftware · 4.1% likely

    CWE-125

17. Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code vi…CVE-2017-8454Foxitsoftware · 3.9% likely

    CWE-125

18. Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code vi…CVE-2017-8453Foxitsoftware · 3.9% likely

    CWE-125

19. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerabi…CVE-2018-17628Foxitsoftware · 3.9% likely

    CWE-416

20. Stack-based buffer overflow in Foxit Advanced PDF Editor 3 before 3.04 might allow remote attackers to execute arbitrary code via a crafted document containing instructions that r…CVE-2013-0107Foxitsoftware · 3.9% likely

    CWE-119

21. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulne…CVE-2018-17700Foxitsoftware · 3.9% likely

    CWE-125

22. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required…CVE-2018-5679Foxitsoftware · 3.8% likely

    CWE-125

23. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required…CVE-2018-5678Foxitsoftware · 3.8% likely

    CWE-119

24. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required…CVE-2018-5677Foxitsoftware · 3.8% likely

    CWE-125

25. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required…CVE-2018-5674Foxitsoftware · 3.8% likely

    CWE-119

26. An issue was discovered in Foxit Reader before 9.1 and PhantomPDF before 9.1. This vulnerability allows remote attackers to execute arbitrary code. User interaction is required to…CVE-2018-7407Foxitsoftware · 3.7% likely

    CWE-704

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.