CVE-2021-33795: Medium severity foxit reader vulnerability
Published Jul 9, 2021
·Updated
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures because the certificate name, document owner, and signature author are mishandled.
Affected Software
2 affected components
Foxitsoftware Foxit Reader<10.1.4
Foxitsoftware Phantompdf<10.1.4
Event History
Jul 9, 2021
CVE Published
via MITRE·05:13 PM
Data Sourced
via MITRE·05:13 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-33795.
2
Which software versions are affected by this vulnerability?
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 are affected by this vulnerability.
3
What is the severity rating of this vulnerability?
This vulnerability has a severity rating of 5.5, which is considered medium.
4
What is the CWE ID associated with this vulnerability?
The CWE ID associated with this vulnerability is 755.
5
How can I fix this vulnerability?
To fix this vulnerability, update your Foxit Reader or PhantomPDF software to version 10.1.4 or later.