Foxit PDF Reader Vulnerable to High-Severity Flaws

Discussion in 'other security issues & news' started by mood, Sep 30, 2019.

  1. mood

    mood Updates Team

    Joined:
    Oct 27, 2012
    Posts:
    27,486
    Vulnerability Spotlight: Foxit PDF Reader JavaScript Array.includes remote code execution vulnerability
    September 30, 2019
    https://blog.talosintelligence.com/2019/09/vuln-spotlight-foxit-PDF-JavaScript-sept-2019.html
     
    mood, Sep 30, 2019
    #1
  2. mood

    mood Updates Team

    Joined:
    Oct 27, 2012
    Posts:
    27,486
    Foxit PDF Reader Vulnerable to 8 High-Severity Flaws
    Eight high-severity vulnerabilities exist in the Foxit Reader tool for editing PDF files
    October 3, 2019
    https://threatpost.com/foxit-pdf-reader-vulnerable-to-8-high-severity-flaws/148897/
     
    mood, Oct 3, 2019
    #2
  3. Page42

    Page42 Registered Member

    Joined:
    Jun 18, 2007
    Posts:
    6,384
    Location:
    USA
    Appreciate the heads up, mood. :thumb:
     
    Page42, Oct 4, 2019
    #3
  4. mood

    mood Updates Team

    Joined:
    Oct 27, 2012
    Posts:
    27,486
    ;)
     
    mood, Oct 4, 2019
    #4
  5. bo elam

    bo elam Registered Member

    Joined:
    Jun 15, 2010
    Posts:
    5,623
    Location:
    Nicaragua
    Perhaps someone knows, Is Portable apps still posting updates for Foxit Reader? This past few weeks I visited a few times the page for Foxit at PA to see if an update was available, but is not happening.

    The latest version they posted is from April. I think I might of read somewhere months ago that PA is not updating Foxit anymore but I cant remember if I really read that.

    https://portableapps.com/apps/office/foxit_reader_portable

    Bo
     
    bo elam, Oct 20, 2019
    #5
  6. JRViejo

    JRViejo Super Moderator

    Joined:
    Jul 9, 2008
    Posts:
    46,730
    Location:
    U.S.A.
    Bo, Foxit Reader 9.7.0.29455 is listed in the Work In Progress queue. As to when it will get posted is anyone's guess:

    https://portableapps.com/development/outdated
     
    JRViejo, Oct 20, 2019
    #6
  7. bo elam

    bo elam Registered Member

    Joined:
    Jun 15, 2010
    Posts:
    5,623
    Location:
    Nicaragua
    Thanks JR, appreciate the reply. Sometimes I go long whiles before updating Foxit, that's normal for me, but right now its probably a time were the update is really needed, this is specially so for people not running Foxit portable under Sandboxie's protection.

    Bo
     
    bo elam, Oct 20, 2019
    #7
  8. JRViejo

    JRViejo Super Moderator

    Joined:
    Jul 9, 2008
    Posts:
    46,730
    Location:
    U.S.A.
    Bo, you're welcome. Unfortunately, ever since the below message appeared last year in the Outdated page, PortableApps software updates have been taking a lot longer than in the past. Perhaps the health issue is still ongoing. Take care.
     
    JRViejo, Oct 20, 2019
    #8
  9. Beyonder

    Beyonder Registered Member

    Joined:
    Aug 26, 2011
    Posts:
    545
    This is why I go with SumatraPDF. All it's missing that I could ever want is the highlighting of text.
     
    Beyonder, Oct 21, 2019
    #9
  10. klarm

    klarm Registered Member

    Joined:
    Apr 7, 2012
    Posts:
    78
    Location:
    europe
    I was just in search of a good PDF reader for win10.
    my candidates after some small research online were foxit and expert pdf reader by visagesoft.
    which one to pick now?
    this sumatraPDF mentioned above, proven safe?
    thanks
     
    klarm, Oct 21, 2019
    #10
  11. zapjb

    zapjb Registered Member

    Joined:
    Nov 15, 2005
    Posts:
    4,872
    Location:
    USA still the best. But getting worse!
    I use PDF-XChange PDF Viewer.

    Used FixIt LONG time ago & it was having some weird problems that were corrected. Done. The problems were spying or some bs by FoxIt.

    Used & liked Sumatra.

    Every once in a while I need a feature that Sumatra didn't have. So I stick with PDF-XChange PDF Viewer.


    For print to PDF I use Doro PDF Writer.
    For PDF conversion I use Renee PDF aide.
     
    zapjb, Oct 21, 2019
    #11
  12. klarm

    klarm Registered Member

    Joined:
    Apr 7, 2012
    Posts:
    78
    Location:
    europe
    Thanks for info.
    Is it a need to have a PDF print program also cos if I'm not mistaken w10 has a built-in PDF print?
     
    klarm, Oct 22, 2019
    #12
  13. mood

    mood Updates Team

    Joined:
    Oct 27, 2012
    Posts:
    27,486
    Canadian Centre for Cyber Security
    Foxit Reader and Foxit PhantomPDF Security Advisory
    Number: AV19-246
    October 29, 2019
    https://cyber.gc.ca/en/alerts/foxit-reader-and-foxit-phantompdf-security-advisory
     
    mood, Oct 30, 2019
    #13
  14. bo elam

    bo elam Registered Member

    Joined:
    Jun 15, 2010
    Posts:
    5,623
    Location:
    Nicaragua
    The updated version of Foxit portable is finally out. It took a long time but I am glad is out.

    https://portableapps.com/apps/office/foxit_reader_portable

    Bo
     
    bo elam, Nov 20, 2019
    #14
  15. JRViejo

    JRViejo Super Moderator

    Joined:
    Jul 9, 2008
    Posts:
    46,730
    Location:
    U.S.A.
    Good to know; thanks! :thumb:
     
    JRViejo, Nov 20, 2019
    #15
  16. bo elam

    bo elam Registered Member

    Joined:
    Jun 15, 2010
    Posts:
    5,623
    Location:
    Nicaragua
    You are welcome, JR. :)

    Bo
     
    bo elam, Nov 20, 2019
    #16
  17. mood

    mood Updates Team

    Joined:
    Oct 27, 2012
    Posts:
    27,486
    Foxit PDF Reader, PhantomPDF Open to Remote Code Execution
    April 20, 2020
    https://threatpost.com/foxit-pdf-reader-phantompdf-remote-code-execution/154942/
    Foxit: Security updates available in Foxit Reader 9.7.2 and Foxit PhantomPDF 9.7.2
     
    mood, Apr 20, 2020
    #17
  18. Reality

    Reality Registered Member

    Joined:
    Aug 25, 2013
    Posts:
    1,186
    Exactly my situation word for word - See no reason to change from PDF-XChange PDF Viewer
     
    Reality, Apr 20, 2020
    #18
Loading...
Similar Threads
  1. ronjor

    pppd vulnerable to buffer overflow due to a flaw in EAP packet processing

    ronjor, Mar 4, 2020
    Replies:
    0
    Views:
    416
    ronjor
    Mar 4, 2020
  2. mood

    GhostCat: New High-Risk Vulnerability Affects Servers Running Apache Tomcat

    mood, Feb 28, 2020
    Replies:
    2
    Views:
    1,241
    mood
    Mar 24, 2020
  3. ronjor

    OpenSMTPD Vulnerability

    ronjor, Feb 3, 2020
    Replies:
    1
    Views:
    563
    ronjor
    Feb 3, 2020
  4. hawki

    ConnectWise Control MSP Security Vulnerabilities Are ‘Severe

    hawki, Jan 22, 2020
    Replies:
    0
    Views:
    470
    hawki
    Jan 22, 2020
  5. mood

    High Risk Vulnerabilities Addressed in Big Monitoring Fabric

    mood, Jan 2, 2020
    Replies:
    0
    Views:
    511
    mood
    Jan 2, 2020
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...