Versions of Foxit Reader prior or equal to 7.3.4 are affected by the following vulnerbilities :

 - An overflow condition exists that is triggered as user-supplied input is not properly validated when handling 'GoToR' actions.  With a specially crafted PDF file, a context-dependent attacker can cause a stack-based buffer overflow, potentially allowing the execution of arbitrary code.
 - An overflow condition exists in the 'ConvertToPDF' plugin that is triggered as user-supplied input is not properly validated when handling 'SamplesPerPixel' values in TIFF images.  With a specially crafted TIFF image, a context-dependent attacker can cause a heap-based buffer overflow, potentially allowing the execution of arbitrary code.
 - A use-after-free error that is triggered when handling image descriptions.  With a specially crafted PDF file, a context-dependent attacker can dereference already freed memory and potentially execute arbitrary code.
 - An overflow condition exists that is triggered as user-supplied input is not properly validated when handling bezier data.  With a specially crafted PDF file, a context-dependent attacker can cause a heap-based buffer overflow, potentially allowing the execution of arbitrary code.
 - An unspecified out-of-bounds access flaw exists that is triggered as certain input is not properly validated.  With a specially crafted PDF file, a context-dependent attacker can potentially execute arbitrary code.
 - A flaw exists related to an uninitialized pointer being dereferenced when handling stretched images.  With a specially crafted PDF file, a context-dependent attacker can potentially execute arbitrary code.
 - An out-of-bounds read flaw exists in the 'ConvertToPDF' plugin that is triggered when converting BMP images.  This may allow a context-dependent attacker to disclose arbitrary memory content.
 - An out-of-bounds write flaw exists in the 'ConvertToPDF' plugin that is triggered when converting BMP images.  This may allow a context-dependent attacker to potentially execute arbitrary code.
 - An out-of-bounds write flaw exists in the 'ConvertToPDF' plugin that is triggered when converting GIF images.  This may allow a context-dependent attacker to potentially execute arbitrary code.
 - An out-of-bounds read flaw exists that is triggered when handling color components in JPEG images.  This may allow a context-dependent attacker to disclose arbitrary memory content.
 - An out-of-bounds read flaw exists in the 'ConvertToPDF' plugin that is triggered when converting JPEG images with specially crafted EXIF data.  This may allow a context-dependent attacker to disclose arbitrary memory content.
 - A flaw exists that is triggered as paths to 'exportData' are not properly checked.  This may allow a context-dependent attacker to potentially execute arbitrary code.
 - A flaw exists that is triggered during the handling of SWF files embedded inside PDF files.  This may allow a context-dependent attacker to bypass safe mode.
 - A use-after-free error is triggered when handling 'FlateDecode'. This may allow a context-dependent attacker to dereference already freed memory and potentially execute arbitrary code.
 - A use-after-free error is triggered when handling the layout direction of XFA files. This may allow a context-dependent attacker to dereference already freed memory and potentially execute arbitrary code.

根據其版本，遠端 Windows 主機上安裝的 Foxit PhantomPDF 應用程式 (之前稱為 Phantom) 版本比 8.1.1 舊。因此，會受到多個弱點影響。

根據其版本，遠端 Windows 主機上安裝的 Foxit PhantomPDF 應用程式 (之前稱為 Phantom) 版本比 7.3.9 舊。因此，會受到多個弱點影響。

根据其版本，远程 Windows 主机上安装的 Foxit Reader 应用程序低于 8.0。因此，该应用程序受到多个漏洞的影响：

  - Foxit Reader 和 PhantomPDF 7.3.4.311 及 Windows 早期版本中的释放后使用漏洞允许远程攻击者造成拒绝服务（应用程序崩溃）并通过构建的 PDF 文件执行任意代码。 (CVE-2016-6168)

  - Foxit Reader 和 PhantomPDF 7.3.4.311 及 Windows 早期版本中的基于堆的缓冲区溢出漏洞允许远程攻击者造成拒绝服务（内存损坏和应用程序崩溃）或可能通过构建的 PDF 文件中的 Bezier 数据执行任意代码。 (CVE-2016-6169)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

根据其版本，远程 Windows 主机上安装的 Foxit PhantomPDF 应用程序（旧称 Phantom）版本低于 8.0。因此，该主机受到多个漏洞的影响。

根据其版本，远程 Windows 主机上安装的 Foxit PhantomPDF 应用程序（旧称 Phantom）版本低于 8.1.1。因此，该主机受到多个漏洞的影响。

根据其版本，远程 Windows 主机上安装的 Foxit PhantomPDF 应用程序（旧称 Phantom）版本低于 7.3.9。因此，该主机受到多个漏洞的影响。

根據其版本，遠端 Windows 主機上安裝的 Foxit Reader 應用程式版本是 8.0 之前版本。因此，該應用程式受到多個弱點影響：

  - Windows 上的 Foxit Reader 和 PhantomPDF 7.3.4.311 及更舊版本中的釋放後使用弱點允許遠端攻擊者透過特製的 PDF 檔案造成拒絕服務 (應用程式損毀) 並執行任意程式碼。(CVE-2016-6168)

  - Windows 上的 Foxit Reader 和 PhantomPDF 7.3.4.311 及更舊版本中的堆積型緩衝區溢位允許遠端攻擊者透過特製的 PDF 檔案中的 Bezier 資料造成拒絕服務 (記憶體損毀和應用程式損毀) 並執行任意程式碼。(CVE-2016-6169)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

根據其版本，遠端 Windows 主機上安裝的 Foxit PhantomPDF 應用程式 (之前稱為 Phantom) 版本比 8.0 舊。因此，會受到多個弱點影響。

バージョン情報によると、リモートの Windows ホストにインストールされている Foxit PhantomPDF アプリケーション (旧 Phantom) は、7.3.9より前です。したがって、複数の脆弱性の影響を受けます。

バージョン情報によると、リモートのWindowsホストにインストールされているFoxit Readerアプリケーションは、8.0より前です。そのため、以下の複数の脆弱性の影響を受けます。

  - Windows 上の Foxit Reader および PhantomPDF 7.3.4.311 以前のメモリ解放後使用 (use after free) の脆弱性により、リモートの攻撃者が、サービス拒否 (アプリケーションクラッシュ) を引き起こし、細工された PDF ファイルから任意のコードを実行する可能性があります。(CVE-2016-6168)

  - Windows 上の Foxit Reader および PhantomPDF 7.3.4.311 以前のヒープベースのバッファオーバーフローの脆弱性により、リモートの攻撃者が、サービス拒否 (メモリの破損やアプリケーションクラッシュ) を引き起こし、細工された PDF ファイルの Bezier データから任意のコードを実行する可能性があります。(CVE-2016-6169)

Nessus はこの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

バージョン情報によると、リモートの Windows ホストにインストールされている Foxit PhantomPDF アプリケーション (旧 Phantom) は、8.0より前です。したがって、複数の脆弱性の影響を受けます。

バージョン情報によると、リモートのWindowsホストにインストールされているFoxit PhantomPDFアプリケーション（旧Phantom）は、8.1.1より前です。したがって、複数の脆弱性の影響を受けます。

According to its version, the Foxit PhantomPDF application (formally known as Phantom) installed on the remote Windows host is prior to 8.1.1. It is, therefore, affected by multiple vulnerabilities.

According to its version, the Foxit PhantomPDF application (formally known as Phantom) installed on the remote Windows host is prior to 7.3.9. It is, therefore, affected by multiple vulnerabilities.

According to its version, the Foxit Reader application installed on the remote Windows host is prior to 8.0. It is, therefore affected by multiple vulnerabilities:

  - Use-after-free vulnerability in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote     attackers to cause a denial of service (application crash) and execute arbitrary code via a crafted PDF     file. (CVE-2016-6168)

  - Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote     attackers to cause a denial of service (memory corruption and application crash) or potentially execute     arbitrary code via the Bezier data in a crafted PDF file. (CVE-2016-6169)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its version, the Foxit PhantomPDF application (formally known as Phantom) installed on the remote Windows host is prior to 8.0. It is, therefore, affected by multiple vulnerabilities.

ID	Name	Product	Family	Published	Updated	Severity
9469	Foxit Reader < 8.0 Multiple Vulnerabilities	Nessus Network Monitor	CGI	8/5/2016	3/6/2019	critical
119263	Foxit PhantomPDF < 8.1.1 多個弱點	Nessus	Windows	11/28/2018	4/29/2026	high
119259	Foxit PhantomPDF < 7.3.9 多個弱點	Nessus	Windows	11/28/2018	4/29/2026	high
182773	Foxit Reader < 8.0 多个漏洞	Nessus	Windows	10/9/2023	5/19/2026	high
119260	Foxit PhantomPDF < 8.0 多个漏洞	Nessus	Windows	11/28/2018	4/29/2026	high
119263	Foxit PhantomPDF < 8.1.1 多个漏洞	Nessus	Windows	11/28/2018	4/29/2026	high
119259	Foxit PhantomPDF < 7.3.9 多个漏洞	Nessus	Windows	11/28/2018	4/29/2026	high
182773	Foxit Reader < 8.0 多個弱點	Nessus	Windows	10/9/2023	5/19/2026	high
119260	Foxit PhantomPDF < 8.0 多個弱點	Nessus	Windows	11/28/2018	4/29/2026	high
119259	Foxit PhantomPDF < 7.3.9 の複数の脆弱性	Nessus	Windows	11/28/2018	4/29/2026	high
182773	Foxit Reader < 8.0の複数の脆弱性	Nessus	Windows	10/9/2023	5/19/2026	high
119260	Foxit PhantomPDF < 8.0の複数の脆弱性	Nessus	Windows	11/28/2018	4/29/2026	high
119263	Foxit PhantomPDF < 8.1.1の複数の脆弱性	Nessus	Windows	11/28/2018	4/29/2026	high
119263	Foxit PhantomPDF < 8.1.1 Multiple Vulnerabilities	Nessus	Windows	11/28/2018	4/29/2026	high
119259	Foxit PhantomPDF < 7.3.9 Multiple Vulnerabilities	Nessus	Windows	11/28/2018	4/29/2026	high
182773	Foxit Reader < 8.0 Multiple Vulnerabilities	Nessus	Windows	10/9/2023	5/19/2026	high
119260	Foxit PhantomPDF < 8.0 Multiple Vulnerabilities	Nessus	Windows	11/28/2018	4/29/2026	high

Detections

Analytics

Plugins Search

critical

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high