According to its version, the Foxit PDF Reader application (previously named Foxit Reader) installed on the remote Windows host is prior to 11.1. It is, therefore affected by multiple vulnerabilities:

  - Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to     trigger a use-after-free and execute arbitrary code because JavaScript is mishandled. (CVE-2021-41780,     CVE-2021-41781, CVE-2021-41782, CVE-2021-41783, CVE-2021-41784, CVE-2021-41785)

  - Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden     and incremental data in signed documents. An attacker can write to an arbitrary file, and display     controlled contents, during signature verification. (CVE-2021-40326)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Foxit PDF Reader < 11.1 Multiple Vulnerabilities

high Nessus Plugin ID 154004

Version 1.8