CVSS: 5.3EPSS: 0%CPEs: 46EXPL: 0CVE-2018-18688
https://notcve.org/view.php?id=CVE-2018-18688
07 Jan 2021 — The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or annotations, Body Updates are displayed to the user without any action by the signature-validation logic. This affects Foxit Reader before 9.4 and PhantomPDF before 8.3.9 and 9.x before 9.4. It also affects LibreOffice... • https://pdf-insecurity.org/signature/evaluation_2018.html • CWE-347: Improper Verification of Cryptographic Signature •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2013-0107
https://notcve.org/view.php?id=CVE-2013-0107
26 Jan 2013 — Stack-based buffer overflow in Foxit Advanced PDF Editor 3 before 3.04 might allow remote attackers to execute arbitrary code via a crafted document containing instructions that reconstruct a certain security cookie. Desbordamiento de búfer basado en pila en Foxit Advanced PDF Editor v3 anterior a v3.04 podría permitir a atacantes remotos ejecutar código arbitrario a través de la manipulación de un documento que contenga instrucciones para una determinada cookie de seguridad. • http://www.kb.cert.org/vuls/id/275219 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •