medium5.5
CVE-2021-40326
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden and incremental data in signed documents.
Impact
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden and incremental data in signed documents. An attacker can write to an arbitrary file, and display controlled contents, during signature verification.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Foxit | Pdf Editor | from 11.0 before 11.1 |
| Foxit | Pdf Reader | from 11.0 before 11.1 |
| Foxit | Phantompdf | before 10.1.6 |