Foxit PDF Reader before 11.2.2 and PDF Editor before 11.2.2, and PhantomPDF before 10.1.8, mishandle cross-reference information during compressed-object parsing within signed documents. This leads to delivery of incorrect signature information via an Incremental Saving Attack and a Shadow Attack.
References
Link | Resource |
---|---|
https://www.foxit.com/support/security-bulletins.html | Vendor Advisory |
https://www.foxit.com/support/security-bulletins.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
21 Nov 2024, 06:52
Type | Values Removed | Values Added |
---|---|---|
References | () https://www.foxit.com/support/security-bulletins.html - Vendor Advisory |
Information
Published : 2022-08-29 05:15
Updated : 2024-11-21 06:52
NVD link : CVE-2022-25641
Mitre link : CVE-2022-25641
CVE.ORG link : CVE-2022-25641
JSON object : View
Products Affected
foxit
- pdf_editor
- phantompdf
- pdf_reader
microsoft
- windows
CWE