Spoofing attack in Foxit PDF Editor (formerly Foxit PhantomPDF) and Foxit PDF Reader for Windows - #VU48905
Published: December 9, 2020 / Updated: December 30, 2020
Vulnerability identifier: #VU48905
CSH Severity: Medium
CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-451
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform an Evil Annotation Attack.
The vulnerability exists due to incorrect processing of user-supplied data when validating certain certified PDF files whose visible content was significantly altered. A remote attacker can spoof contents of the PDF file.
Affected software
Foxit PDF Editor (formerly Foxit PhantomPDF)
Foxit PDF Reader for Windows
Foxit PDF Reader for Windows
Remediation
Install updates from vendor's website.
Foxit PDF Editor (formerly Foxit PhantomPDF) - addressed in versions 9.7.5.29616, 10.1.1.37576
Foxit PDF Reader for Windows - update to 10.1.1.37576
Foxit PDF Reader for Windows - update to 10.1.1.37576