CVE-2021-33794

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA form…

published August 11, 2021

CVSS
—
EPSS
1%
Percentile
65.5
In the wild
Unconfirmed
What it is

⚠️ A simple Tab key press can turn into a headache! Foxit Reader and PhantomPDF versions before 10.1.4 mishandle this keystroke during XFA form interactions, leading to information disclosure or crashes. 🔥 Think of it like a receptionist trying to navigate a busy office with a malfunctioning intercom; pressing the wrong button could accidentally spill private conversations or even crash the whole system! If exploited, this could expose sensitive information or cause the application to crash, leaving users in a lurch and potentially losing unsaved work. Imagine the frustration of trying to fill out a form only to have your tool stop responding!

Put simply

Think of it like a receptionist trying to navigate a busy office with a malfunctioning intercom; pressing the wrong button could accidentally spill private conversations or even crash the whole system! This vulnerability arises from Foxit Reader and PhantomPDF mishandling the Tab key during XFA form interactions, which can lead to unintended information disclosure or crashes when users navigate forms improperly.

What to do

If exploited, this could expose sensitive information or cause the application to crash, leaving users in a lurch and potentially losing unsaved work. Imagine the frustration of trying to fill out a form only to have your tool stop responding! Update to Foxit Reader and PhantomPDF version 10.1.4 or later to mitigate this issue. Regularly check for updates to ensure you’re using the most secure version available. Stay vigilant while interacting with forms to minimize risks! You've got this! Follow these steps, and you'll keep your documents safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01105 · 65.5th percentile
Published
2021-08-11T19:28Z
EPSS history
Timeline
  • 11 AUG 19:28Z
    Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA form…
    cvelistv5