Lucene search
PRIOn knowledge basePRION:CVE-2022-25641HistoryAug 29, 2022 - 5:15 a.m.
Cross site scripting
2022-08-2905:15:00
PRIOn knowledge base
www.prio-n.com
3
pdf
software
cross-reference
incorrect signature
delivery
attack
Foxit PDF Reader before 11.2.2 and PDF Editor before 11.2.2, and PhantomPDF before 10.1.8, mishandle cross-reference information during compressed-object parsing within signed documents. This leads to delivery of incorrect signature information via an Incremental Saving Attack and a Shadow Attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pdf_editor | ge | 11.0 | |
| pdf_editor | lt | 11.2.2 | |
| pdf_reader | ge | 11.0 | |
| pdf_reader | lt | 11.2.2 | |
| phantompdf | lt | 10.1.8 |
Related
nvd
nvd
CVE-2022-25641
2022-08-29 05:15:08
cve
cve
CVE-2022-25641
2022-08-29 05:15:08
cvelist
cvelist
CVE-2022-25641
2022-08-29 04:53:44
kaspersky
kaspersky
KLA12530 Multiple vulnerabilities in Foxit Reader
2022-05-09 00:00:00
nessus
nessus
Foxit PDF Reader < 11.2.2 Multiple Vulnerabilities
2022-05-09 00:00:00
Foxit PDF Editor < 11.2.2 Multiple Vulnerabilities
2022-05-09 00:00:00
Foxit PhantomPDF < 10.1.8 Multiple Vulnerabilities
2022-06-21 00:00:00
openvas
openvas
Foxit Reader < 11.2.2 Multiple Vulnerabilities (Jan 2023)
2023-01-30 00:00:00
Foxit Reader < 11.2.2 Multiple Vulnerabilities (Jan 2023)
2023-01-30 00:00:00