CVE-2020-35931

An issue was discovered in Foxit Reader before 10.1.1 (and before 4.1.1 on macOS) and PhantomPDF before 9.7.5 and 10.x before 10.1.1 (and before 4.1.1 on…

published December 31, 2020

CVSS
—
EPSS
2%
Percentile
83.3
In the wild
Unconfirmed
What it is

An issue was discovered in Foxit Reader before 10.1.1 (and before 4.1.1 on macOS) and PhantomPDF before 9.7.5 and 10.x before 10.1.1 (and before 4.1.1 on macOS). An attacker can spoof a certified PDF document via an Evil Annotation Attack because the products fail to consider a null value for a Subtype entry of the Annotation dictionary, in an incremental update.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02322 · 83.3th percentile
Published
2020-12-31T20:14Z
EPSS history
Timeline
  • 31 DEC 20:14Z
    An issue was discovered in Foxit Reader before 10.1.1 (and before 4.1.1 on macOS) and PhantomPDF before 9.7.5 and 10.x before 10.1.1 (and before 4.1.1 on…
    cvelistv5