Foxit Reader

Every one of the 75 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API. An attacker can execute local files and bypass the security dialog.CVE-2020-14425Foxitsoftware · 31% likely
2. Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.print…CVE-2008-1104Foxitsoftware · 23% likely

   CWE-119

3. Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf_x86.dll in Foxit Reader 7.3.4.311 allows remote attackers to execute arbitrary code via a large Sam…CVE-2016-3740Foxitsoftware · 15% likely

   CWE-119

4. Foxit Reader before 3.2.1.0401 allows remote attackers to (1) execute arbitrary local programs via a certain "/Type /Action /S /Launch" sequence, and (2) execute arbitrary program…CVE-2010-1239Foxitsoftware · 7.5% likely

   CWE-94

5. Foxit Reader 8.3.2.25013 and earlier and Foxit PhantomPDF 8.3.2.25013 and earlier, when running in single instance mode, allows attackers to execute arbitrary code or cause a deni…CVE-2017-14694Foxitsoftware · 7.1% likely

   CWE-119

6. Integer overflow in Foxit Reader before 4.3.1.0218 and Foxit Phantom before 2.3.3.1112 allows remote attackers to execute arbitrary code via crafted ICC chunks in a PDF file, whic…CVE-2011-0332Foxitsoftware · 6.2% likely

   CWE-189

7. The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a negative value for the stream offset in a JPEG2000 (a…CVE-2009-0690Foxitsoftware · 5.7% likely

   CWE-189

8. Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service (memory corruption and application…CVE-2016-6169Foxitsoftware · 5.1% likely

   CWE-119

9. Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allo…CVE-2009-0191Foxitsoftware · 5.0% likely

   CWE-94

10. Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF document with a crafted attachment that triggers calculation of a n…CVE-2012-4337Foxitsoftware · 5.0% likely
11. Integer overflow in the Type 1 font decoder in the FreeType engine in Foxit Reader before 4.0.0.0619 allows remote attackers to execute arbitrary code or cause a denial of service…CVE-2011-1908Foxitsoftware · 5.0% likely

    CWE-189

12. Foxit Reader before 8.3.1 and PhantomPDF before 8.3.1 have an Arbitrary Write vulnerability, which allows remote attackers to execute arbitrary code via a crafted document.CVE-2017-10994Foxitsoftware · 4.9% likely

    CWE-123

13. Foxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free that leads to Remote Code Execution, aka V-88f4smlocs.CVE-2018-14442Foxitsoftware · 4.8% likely

    CWE-416

14. Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via an object with a revision number of -1 in…CVE-2016-4063Foxitsoftware · 4.5% likely
15. Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted FlateDecode stream in a PDF doc…CVE-2016-4059Foxitsoftware · 4.4% likely
16. Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a…CVE-2016-4064Foxitsoftware · 4.2% likely

    CWE-284

17. Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code vi…CVE-2017-8455Foxitsoftware · 4.1% likely

    CWE-125

18. Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code vi…CVE-2017-8454Foxitsoftware · 3.9% likely

    CWE-125

19. Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code vi…CVE-2017-8453Foxitsoftware · 3.9% likely

    CWE-125

20. The ConvertToPDF plugin in Foxit Reader before 8.2 and PhantomPDF before 8.2 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-…CVE-2017-5556Foxitsoftware · 3.7% likely

    CWE-125

21. Multiple use-after-free vulnerabilities in the (1) Print method and (2) App object handling in Foxit Reader before 7.2.2 and Foxit PhantomPDF before 7.2.2 allow remote attackers t…CVE-2015-8580Foxitsoftware · 3.7% likely
22. In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of the BITMAPINFOHEADER record in BMP files. The issue results from the lack of proper…CVE-2017-17557Foxitsoftware · 3.5% likely

    CWE-119

23. The ConvertToPDF plugin in Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (…CVE-2017-6883Foxitsoftware · 3.4% likely

    CWE-125

24. Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges…CVE-2015-2789Foxitsoftware · 3.2% likely
25. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerabi…CVE-2018-9966Foxitsoftware · 3.0% likely

    CWE-416

26. The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or…CVE-2018-18933Foxitsoftware · 3.0% likely

    CWE-125

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.