CVE-2022-25641
MEDIUMFoxit PDF Reader <11.2.2 & PDF Editor <11.2.2 & PhantomPDF <10.1.8 ...
Title source: llmDescription
Foxit PDF Reader before 11.2.2 and PDF Editor before 11.2.2, and PhantomPDF before 10.1.8, mishandle cross-reference information during compressed-object parsing within signed documents. This leads to delivery of incorrect signature information via an Incremental Saving Attack and a Shadow Attack.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_misc
https://www.foxit.com/support/security-bulletins.html
Scores
CVSS v3
5.5
EPSS
0.0006
EPSS Percentile
19.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Details
Status
published
Products (3)
foxit/pdf_editor
11.0 - 11.2.2
foxit/pdf_reader
11.0 - 11.2.2
foxit/phantompdf
< 10.1.8
Published
Aug 29, 2022
Tracked Since
Feb 18, 2026