CVE-2021-33795 — Improper Handling of Exceptional Conditions in Foxit Reader

CWE-755 — Improper Handling of Exceptional Conditions3 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 93.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Foxitsoftware Foxit ReaderFoxitsoftware Phantompdf
Timeline
PublishedJul 9
Latest updateMay 24

Description

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures because the certificate name, document owner, and signature author are mishandled.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-58p3-3997-g6qm: Foxit Reader before 10↗2022-05-24
▶
CVEList
CVE-2021-33795: Foxit Reader before 10↗2021-07-09
▶
CVE-2021-33795 — Foxit Reader vulnerability | cvebase