CVE-2021-40326: Medium severity foxit advanced pdf editor vulnerability
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden and incremental data in signed documents. An attacker can write to an arbitrary file, and display controlled contents, during signature verification.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-40326.
What software versions are affected by CVE-2021-40326?
The affected software versions are Foxit PDF Reader before 11.1, PDF Editor before 11.1, and PhantomPDF before 10.1.6.
What is the severity level of CVE-2021-40326?
The severity level of CVE-2021-40326 is medium.
How does CVE-2021-40326 impact signed documents?
CVE-2021-40326 mishandles hidden and incremental data in signed documents, allowing an attacker to write to an arbitrary file and display controlled contents during signature verification.
Is Microsoft Windows affected by CVE-2021-40326?
No, Microsoft Windows is not affected by CVE-2021-40326.
Where can I find more information about CVE-2021-40326?
You can find more information about CVE-2021-40326 in the security bulletins provided by Foxit at the following reference: [Foxit Security Bulletins](https://www.foxit.com/support/security-bulletins.html).