| CVE-2019-20819 | ALTO7.5 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows stack consumption via nested function calls for XML parsing. | 04/06/2020 |
| CVE-2019-20818 | ALTO7.5 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows memory consumption because data is created for each page of an application level. | 04/06/2020 |
| CVE-2019-20817 | ALTO7.5 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference. | 04/06/2020 |
| CVE-2019-20816 | ALTO7.5 | An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference during the parsing of file data. | 04/06/2020 |
| CVE-2019-20815 | ALTO7.5 | An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows stack consumption via nested function calls for XML parsing. | 04/06/2020 |
| CVE-2019-20814 | ALTO7.5 | An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows memory consumption because data is created for each page of an application level. | 04/06/2020 |
| CVE-2019-20813 | ALTO7.5 | An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference. | 04/06/2020 |
| CVE-2020-13810 | ALTO7.5 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows signature validation bypass via a modified file or a file with non-standard signatures. | 04/06/2020 |
| CVE-2020-13809 | ALTO7.5 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via long strings in the content stream. | 04/06/2020 |
| CVE-2020-13808 | ALTO7.5 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via crafted cross-reference stream data. | 04/06/2020 |
| CVE-2020-13807 | ALTO7.5 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has circular reference mishandling that causes a loop. | 04/06/2020 |
| CVE-2020-13806 | ALTO7.5 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has a use-after-free because of JavaScript execution after a deletion or close operation. | 04/06/2020 |
| CVE-2020-13805 | CRÍTICO9.8 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack mishandling because the CAS service lacks a limit on login failures. | 04/06/2020 |
| CVE-2020-13804 | CRÍTICO9.8 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows information disclosure of a hardcoded username and password in the DocuSign plugin. | 04/06/2020 |
| CVE-2020-13803 | ALTO7.5 | An issue was discovered in Foxit PhantomPDF Mac and Foxit Reader for Mac before 4.0. It allows signature validation bypass via a modified file or a file with non-standard signatures. | 04/06/2020 |
| CVE-2020-10913 | ALTO7.8 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the OCRAndEx | 22/04/2020 |
| CVE-2020-10912 | ALTO7.8 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the SetField | 22/04/2020 |
| CVE-2020-10911 | ALTO7.8 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the GetField | 22/04/2020 |
| CVE-2020-10910 | ALTO7.8 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the RotatePa | 22/04/2020 |
| CVE-2020-10909 | ALTO7.8 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the AddWater | 22/04/2020 |