Medium severity · published Jan 7, 2021
CVE-2018-18688
The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures
5.3
CVSS
1.1%
EPSS
No
On KEV
Description
The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or annotations, Body Updates are displayed to the user without any action by the signature-validation logic. This affects Foxit Reader before 9.4 and PhantomPDF before 8.3.9 and 9.x before 9.4. It also affects LibreOffice, Master PDF Editor, Nitro Pro, Nitro Reader, Nuance Power PDF Standard, PDF Editor 6 Pro, PDFelement6 Pro, PDF Studio Viewer 2018, PDF Studio Pro, Perfect PDF 10 Premium, and Perfect PDF Reader.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
Foxit Reader · Foxitsoftware
9.4; 9.1.0; 9.2.0; 9.1.0; 9.2.0 · source: NVD
LI
Libreoffice · Libreoffice
6.0.6.2; 6.1.3.2; 6.0.6.2; 6.1.3.2; 6.1.0.3; 6.1.3.2 · source: NVD
MP
Master Pdf Editor · Code-industry
5.1.12; 5.1.68; 5.1.12; 5.1.68; 5.1.24; 5.1.68 · source: NVD
NP
Nitro Pro · Gonitro
11.0.3.173 · source: NVD
NR
Nitro Reader · Gonitro
5.5.9.2 · source: NVD
PE
Pdf Editor 6 · Iskysoft
6.4.2.3521; 6.6.2.3315; 6.7.6.3399 · source: NVD
PS
Pdf Studio · Qoppa
12.0.7; 12.0.7; 12.0.7 · source: NVD
PS
Pdf Studio Viewer 2018 · Qoppa
2018.0.1; 2018.2.0; 2018.0.1; 2018.2.0; 2018.0.1; 2018.2.0 · source: NVD
PD
Pdfelement6 · Iskysoft
6.8.0.3523; 6.8.4.3921; 6.7.1.3355; 6.7.6.3399 · source: NVD
PP
Perfect Pdf 10 · Soft-xpansion
10.0.0.1 · source: NVD
PP
Perfect Pdf Reader · Soft-xpansion
13.0.3; 13.1.5 · source: NVD
PH
Phantompdf · Foxitsoftware
9.0 before 9.4; 8.3.9 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-18688
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-18688
Third Party Advisory
https://pdf-insecurity.org/signature/evaluation_2018.html
Third Party Advisory
https://pdf-insecurity.org/signature/signature.html
Vendor Advisory
https://www.foxitsoftware.com/support/security-bulletins.php
Third Party Advisory
https://www.pdfa.org/recently-identified-pdf-digital-signature-vulnerabilities/