Foxit Reader before 9.7 allows an Access Violation and crash if insufficient memory exists.

According to its version, the Foxit PhantomPDF application (formally known as Phantom) installed on the remote Windows host is prior to 9.7. It is, therefore affected by  multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its version, the Foxit PhantomPDF application (formally known as Phantom) installed on the remote Windows host is prior to 8.x < 8.3.12 / 9.x < 9.7. It is, therefore affected by multiple vulnerabilities: 

  - An out-of-bounds error exists in the V8 JavaScript engine. An unauthenticated, remote attacker can exploit     this, by tricking a user into opening a malicious file to execute arbitrary commands. (CVE-2019-5031)

  - A denial of service (DOS) vulnerability exists in the V8 JavaScript engine due to two unique RecursiveCall     bugs. An unauthenticated, remote attacker can exploit this, to exhaust the available stack memory.     (CVE-2019-13123, CVE-2019-13124)

  - A denial of service (DOS) vulnerability exists due to a potential issue where the application could be     exposed to an access violation vulnerability. An unauthenticated, remote attacker could exploit this, by     launching the application under conditions where there is not enough memory in the system, to cause the     application to stop responding.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its version, the Foxit Reader application installed on the remote Windows host is prior to 9.7. It is, therefore affected by multiple vulnerabilities:

  - Addressed potential issues where the application could be exposed to Remote Code Execution vulnerability     and crash due to the unexpected error or out-of-memory in V8 Engine when executing certain JavaScript.
    (CVE-2019-5031, CVE-2019-13123, CVE-2019-13124)

  - Addressed a potential issue where the application could be exposed to Access Violation vulnerability and     crash when it was launched on the condition that there was no enough memory in the current system.
    (CVE-2019-17183)

  - Addressed potential issues where the application could be exposed to Use-After-Free Remote Code Execution     vulnerability when deleting Field with the nested scripts.

  - Addressed potential issues where the application could be exposed to Type Confusion Remote Code Execution     vulnerability and crash when parsing TIFF files as the application failed to set decoding information for     images properly.

Additionally, the application was affected by multiple potential denial of service, and remote code execution vulnerabilities.

ID	Name	Product	Family	Type	Severity
131191	Foxit PhantomPDF < 9.7 Multiple Vulnerabilities	Nessus	Windows	Local	high
130625	Foxit PhantomPDF 8.x < 8.3.12 / 9.x < 9.7 Multiple Vulnerabilities	Nessus	Windows	Local	high
129494	Foxit Reader < 9.7 Multiple Vulnerabilities	Nessus	Windows	Local	high

Detections

Analytics

CVE-2019-17183

high

Tenable Plugins

high

high

high