Versions of Foxit Reader prior to 7.3.4 are affected by the following vulnerbilities :

 - A use-after-free error exists that may allow a context-dependent attacker to dereference already freed memory and potentially execute arbitrary code.
 - A use-after-free condition exists that is triggered when handling FlateDecode streams.  With a specially crafted PDF file, a context-dependent attacker can dereference already freed memory and potentially execute arbitrary code.
 - A use-after-free condition exists that is triggered when handling object revision numbers.  With a specially crafted PDF file, a context-dependent attacker can dereference already freed memory and potentially execute arbitrary code. 
 - An out-of-bounds read flaw exists that is triggered when decoding GIF images during PDF conversion.  This may allow a context-dependent attacker to potentially disclose sensitive memory contents.
 - A use-after-free condition exists that is triggered during the handling of XFA re-layouts.  This may allow a context-dependent attacker to dereference already freed memory and potentially execute arbitrary code.
 - A use-after-free condition exists related to the TimeOut function. With a specially crafted PDF file, a context-dependent attacker can dereference already freed memory and potentially execute arbitrary code.
 - A use-after-free condition exists that is triggered when handling JavaScript API calls while closing a document.  With a specially crafted PDF file, a context-dependent attacker can dereference already freed memory and potentially execute arbitrary code.
 - A flaw exists that is triggered during the parsing of content streams.  This may allow a context-dependent attacker to crash the process. 
 - A flaw exists that is triggered when recursively triggering PDF format errors.  This may allow a context-dependent attacker to cause the application to stop responding.
 - An out-of-bounds read flaw exists that is triggered when decoding JPEG images during PDF conversion.  This may allow a context-dependent attacker to potentially disclose sensitive memory contents.
 - An out-of-bounds read flaw exists that is triggered when decoding BMP images during PDF conversion.  This may allow a context-dependent attacker to potentially disclose sensitive memory contents.

The version of Foxit Reader installed on the remote Windows host is prior to 7.3.4. It is, therefore, affected by multiple vulnerabilities :

  - A use-after-free error exists that is triggered when     handling FlateDecode streams. An unauthenticated,     remote attacker can exploit this, via a crafted PDF     file, to dereference already freed memory, resulting in     a denial of service or the execution of arbitrary code.
    (CVE-2016-4059)

  - A use-after-free error exists that is related to the     TimeOut() function. An unauthenticated, remote attacker     can exploit this, via a crafted PDF file, to dereference     already freed memory, resulting in a denial of service     or the execution of arbitrary code. (CVE-2016-4060)

  - An unspecified flaw exists that is triggered when     parsing content streams. An unauthenticated, remote     attacker can exploit this to crash the application,     resulting in a denial of service. (CVE-2016-4061)

  - An unspecified flaw exists that is triggered when     recursively triggering PDF format errors. An     unauthenticated, remote attacker can exploit this to     cause the application to stop responding, resulting in a     denial of service. (CVE-2016-4062)

  - A use-after-free error exists that is triggered when     handling object revision numbers. An unauthenticated,     remote attacker can exploit this, via a crafted PDF     file, to dereference already freed memory, resulting in     a denial of service or the execution of arbitrary code.
    (CVE-2016-4063)

  - A use-after-free error exists that is triggered when     handling XFA re-layouts. An unauthenticated, remote     attacker can exploit this to dereference already freed     memory, resulting in a denial of service or the     execution of arbitrary code. (CVE-2016-4064)

  - An out-of-bounds read error exists that is triggered     when decoding BMP, GIF, and JPEG images during PDF     conversion. An unauthenticated, remote attacker can     exploit this to disclose sensitive memory contents or     cause a denial of service. (CVE-2016-4065)

  - An unspecified use-after-free error exists that allows     an unauthenticated, remote attacker to dereference     already freed memory, resulting in a denial of service     or the execution of arbitrary code.

  - A use-after-free error exists that is triggered when     handling JavaScript API calls when closing a document.
    An unauthenticated, remote attacker can exploit this,     via a crafted PDF file, to dereference already freed     memory, resulting in a denial of service or the     execution of arbitrary code.

According to its version, the Foxit PhantomPDF application (formally known as Phantom) installed on the remote Windows host is prior to 7.3.4. It is, therefore, affected by multiple vulnerabilities :

  - A use-after-free error exists that is triggered when     handling FlateDecode streams. An unauthenticated,     remote attacker can exploit this, via a crafted PDF     file, to dereference already freed memory, resulting in     a denial of service or the execution of arbitrary code.
    (CVE-2016-4059)

  - A use-after-free error exists that is related to the     TimeOut() function. An unauthenticated, remote attacker     can exploit this, via a crafted PDF file, to dereference     already freed memory, resulting in a denial of service     or the execution of arbitrary code. (CVE-2016-4060)

  - An unspecified flaw exists that is triggered when     parsing content streams. An unauthenticated, remote     attacker can exploit this to crash the application,     resulting in a denial of service. (CVE-2016-4061)

  - An unspecified flaw exists that is triggered when     recursively triggering PDF format errors. An     unauthenticated, remote attacker can exploit this to     cause the application to stop responding, resulting in a     denial of service. (CVE-2016-4062)

  - A use-after-free error exists that is triggered when     handling object revision numbers. An unauthenticated,     remote attacker can exploit this, via a crafted PDF     file, to dereference already freed memory, resulting in     a denial of service or the execution of arbitrary code.
    (CVE-2016-4063)

  - A use-after-free error exists that is triggered when     handling XFA re-layouts. An unauthenticated, remote     attacker can exploit this to dereference already freed     memory, resulting in a denial of service or the     execution of arbitrary code. (CVE-2016-4064)

  - An out-of-bounds read error exists that is triggered     when decoding BMP, GIF, and JPEG images during PDF     conversion. An unauthenticated, remote attacker can     exploit this to disclose sensitive memory contents or     cause a denial of service. (CVE-2016-4065)

  - An unspecified use-after-free error exists that allows     an unauthenticated, remote attacker to dereference     already freed memory, resulting in a denial of service     or the execution of arbitrary code.

  - A use-after-free error exists that is triggered when     handling JavaScript API calls when closing a document.
    An unauthenticated, remote attacker can exploit this,     via a crafted PDF file, to dereference already freed     memory, resulting in a denial of service or the     execution of arbitrary code.

ID	Name	Product	Family	Published	Updated	Severity
9468	Foxit Reader < 7.3.4 Multiple Vulnerabilities	Nessus Network Monitor	CGI	8/5/2016	3/6/2019	critical
90567	Foxit Reader < 7.3.4 Multiple Vulnerabilities	Nessus	Windows	4/18/2016	11/20/2019	high
90566	Foxit PhantomPDF < 7.3.4 Multiple Vulnerabilities	Nessus	Windows	4/18/2016	11/20/2019	high

Detections

Analytics

Plugins Search

critical

high

high