CVE-2021-40326

MEDIUM

5.5

Description

Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden and incremental data in signed documents. An attacker can write to an arbitrary file, and display controlled contents, during signature verification.

CVE Details

CVSS v3.1 Score5.5

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

Published8/29/2022

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

foxit:pdf_editorfoxit:pdf_readerfoxit:phantompdfmicrosoft:windows

Weaknesses (CWE)

CWE-347

References

https://www.foxit.com/support/security-bulletins.html(cve@mitre.org)

https://www.foxit.com/support/security-bulletins.html(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.