CVE-2021-41784
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-41784
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
多款Foxit产品资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Foxit PhantomPDF等都是中国福昕（Foxit）公司的产品。Foxit PhantomPDF是一款PDF文档阅读器。Foxit PDF Reader是一款PDF阅读器。Foxit PDF Editor是一款PDF编辑器。 多款 Foxit 中存在资源管理错误漏洞，该漏洞源于在处理PDF文件时未能正确判断内存边界。远程攻击者可通过该漏洞利用专门制作的PDF文档，触发内存损坏，并在目标系统上执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2021-41784
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | CVE-2021-41773 Docker lab | https://github.com/Jeromeyoung/CVE-2021-41784 | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-41784
请登录查看更多情报信息。
Same Patch Batch · n/a · 2022-08-29 · 74 CVEs total
| CVE-2022-32548 | 10.0 CRITICAL | DrayTek Vigor routers 安全漏洞 |
| CVE-2022-21165 | 9.8 CRITICAL | Arbitrary Command Injection |
| CVE-2022-25644 | 9.8 CRITICAL | Arbitrary Code Execution |
| CVE-2022-25921 | 8.1 HIGH | Arbitrary Code Execution |
| CVE-2022-37680 | 7.5 HIGH | Hitachi Kokusai Electric ISnex HC-IP9100HD 访问控制错误漏洞 |
| CVE-2022-37681 | 7.5 HIGH | Hitachi Kokusai Electric ISnex HC-IP9100HD 路径遍历漏洞 |
| CVE-2022-0718 | Python-Oslo-Utils 日志信息泄露漏洞 | |
| CVE-2022-0812 | Linux kernel 信息泄露漏洞 | |
| CVE-2022-1198 | Linux kernel 资源管理错误漏洞 | |
| CVE-2022-0850 | Linux kernel 安全漏洞 | |
| CVE-2022-0851 | Convert2RHEL 信息泄露漏洞 | |
| CVE-2022-0367 | libmodbus 缓冲区错误漏洞 | |
| CVE-2022-0669 | DPDK 资源管理错误漏洞 | |
| CVE-2022-0497 | Openscad 缓冲区错误漏洞 | |
| CVE-2022-0496 | Openscad 缓冲区错误漏洞 | |
| CVE-2022-0485 | libnbd 代码问题漏洞 | |
| CVE-2022-0852 | Red Hat Convert2RHEL 安全漏洞 | |
| CVE-2022-1016 | Linux kernel 缓冲区错误漏洞 | |
| CVE-2022-1115 | ImageMagick 缓冲区错误漏洞 | |
| CVE-2022-1117 | glibc 安全特征问题漏洞 |
Showing top 20 of 74 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2021-41784
No comments yet