Foxit PDF Reader before 11.2.2 and PDF Editor before 11.2.2, and PhantomPDF before 10.1.8, mishandle cross-reference information during compressed-object parsing within signed documents. This leads to delivery of incorrect signature information via an Incremental Saving Attack and a Shadow Attack.
References
Link | Resource |
---|---|
https://www.foxit.com/support/security-bulletins.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
02 Sep 2022, 16:26
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-08-29 05:15
Updated : 2024-02-04 22:51
NVD link : CVE-2022-25641
Mitre link : CVE-2022-25641
CVE.ORG link : CVE-2022-25641
JSON object : View
Products Affected
microsoft
- windows
foxit
- pdf_reader
- phantompdf
- pdf_editor
CWE