Shadow Attacks Let Attackers Replace Content in Digitally Signed PDFs

🗓️ 23 Feb 2021 10:46:00Reported by The Hacker NewsType

Researchers demonstrate shadow attacks allowing replacement of content in digitally signed PDFs, circumventing existing countermeasures

Reporter	Title	Published	Views	Family All 51
Tenable Nessus	Adobe Acrobat < 2015.006.30523 / 2017.011.30171 / 2020.009.20063 Multiple Vulnerabilities (APSB20-24)	13 May 202000:00	–	nessus
Tenable Nessus	Adobe Reader < 2015.006.30523 / 2017.011.30171 / 2020.009.20063 Multiple Vulnerabilities (APSB20-24)	13 May 202000:00	–	nessus
Tenable Nessus	Foxit PhantomPDF < 9.7.2 Multiple Vulnerabilities	21 Apr 202000:00	–	nessus
Tenable Nessus	Foxit Reader < 9.7.2 Multiple Vulnerabilities	21 Apr 202000:00	–	nessus
Tenable Nessus	Adobe Acrobat < 2015.006.30523 / 2017.011.30171 / 2020.009.20063 Multiple Vulnerabilities (APSB20-24) (macOS)	13 May 202000:00	–	nessus
Tenable Nessus	Adobe Reader < 2015.006.30523 / 2017.011.30171 / 2020.009.20063 Multiple Vulnerabilities (APSB20-24) (macOS)	13 May 202000:00	–	nessus
Tenable Nessus	Foxit PhantomPDF < 4.0 Privilege Escalation (macOS)	5 Aug 202000:00	–	nessus
Tenable Nessus	Foxit PhantomPDF for Mac < 4.0 Multiple Vulnerabilities	9 Oct 202300:00	–	nessus
Tenable Nessus	Foxit Reader < 4.0 Privilege Escalation (macOS)	5 Aug 202000:00	–	nessus
BDU FSTEC	The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to privilege management errors, allowing an attacker to execute arbitrary code.	17 Jun 202000:00	–	bdu_fstec

23 Feb 2021 10:46Current

1.1Low risk

Vulners AI Score1.1

CVSS 26.8

CVSS 3.17.8

EPSS0.02328