Medium severity · published Jan 7, 2021
CVE-2018-18689
The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures
5.3
CVSS
3.6%
EPSS
No
On KEV
Description
The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, a Signature Wrapping vulnerability exists in multiple products. An attacker can use /ByteRange and xref manipulations that are not detected by the signature-validation logic. This affects Foxit Reader before 9.4 and PhantomPDF before 8.3.9 and 9.x before 9.4. It also affects eXpert PDF 12 Ultimate, Expert PDF Reader, Nitro Pro, Nitro Reader, PDF Architect 6, PDF Editor 6 Pro, PDF Experte 9 Ultimate, PDFelement6 Pro, PDF Studio Viewer 2018, PDF Studio Pro, PDF-XChange Editor and Viewer, Perfect PDF 10 Premium, Perfect PDF Reader, Soda PDF, and Soda PDF Desktop.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.6% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EP
Expert Pdf Reader · Visagesoft
9.0.180 · source: NVD
EP
Expert Pdf Ultimate · Avanquest
12.0.20 · source: NVD
FR
Foxit Reader · Foxitsoftware
9.1.0; 9.2.0.9297; 9.3.0.10826; 9.1.0; 9.2.0; 9.1.0; +1 more · source: NVD
NP
Nitro Pro · Gonitro
11.0.3.173 · source: NVD
NR
Nitro Reader · Gonitro
5.5.9.2 · source: NVD
PA
Pdf Architect · Pdfforge
6.0.37; 6.1.24.1862 · source: NVD
PE
Pdf Editor 6 · Iskysoft
6.4.2.3521; 6.6.2.3315; 6.7.6.3399 · source: NVD
PE
Pdf Experte Ultimate · Avanquest
9.0.270 · source: NVD
PS
Pdf Studio · Qoppa
12.0.7; 12.0.7; 12.0.7 · source: NVD
PS
Pdf Studio Viewer 2018 · Qoppa
2018.0.1; 2018.2.0; 2018.0.1; 2018.2.0; 2018.0.1; 2018.2.0 · source: NVD
PE
Pdf-xchange Editor · Pdf-xchange
7.0.237.1; 7.0.326 · source: NVD
PV
Pdf-xchange Viewer · Tracker-software
2.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-18689
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-18689
Third Party Advisory
https://pdf-insecurity.org/signature/evaluation_2018.html
Third Party Advisory
https://pdf-insecurity.org/signature/signature.html
Vendor Advisory
https://www.foxitsoftware.com/support/security-bulletins.php
Third Party Advisory
https://www.pdfa.org/recently-identified-pdf-digital-signature-vulnerabilities/