CVE-2022-25641 - Foxit PDF Reader before 11.2.2 and PDF Editor before 11.2.2, and PhantomPDF before 10.1.8, mishandle cross-reference information during compressed-object parsing within signed documents

Back Back to CVE browser

MEDIUM

Foxit PDF Reader before 11.2.2 and PDF Editor before 11.2.2, and PhantomPDF before 10.1.8, mishandle cross-reference information during compressed-object parsing within signed documents

Published Aug 29, 2022

5.5

MEDIUM

CVSS 3.1

EPSS 0.29%

Description

Foxit PDF Reader before 11.2.2 and PDF Editor before 11.2.2, and PhantomPDF before 10.1.8, mishandle cross-reference information during compressed-object parsing within signed documents. This leads to delivery of incorrect signature information via an Incremental Saving Attack and a Shadow Attack.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-30301
Advisory
https://www.foxit.com/support/security-bulletins.html
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-30301		Advisory
https://www.foxit.com/support/security-bulletins.html		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 29, 2022

Updated Aug 3, 2024

Reserved Feb 22, 2022

Link CVE-2022-25641

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-25641

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Aug 29, 2022

Updated Aug 3, 2024

Link EUVD-2022-30301

GitHub

No data