Malware Campaign Hides in Resumes and Medical Leave Forms

Enterprise VulnerabilitiesFrom DHS/US-CERT's National Vulnerability Database CVE-2019-20834PUBLISHED: 2020-06-04

An issue was discovered in Foxit PhantomPDF before 8.3.10. It allows signature validation bypass via a modified file or a file with non-standard signatures.

CVE-2019-20835PUBLISHED: 2020-06-04

An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has homograph mishandling.

CVE-2019-20836PUBLISHED: 2020-06-04

An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has mishandling of cloud credentials, as demonstrated by Google Drive.

CVE-2019-20837PUBLISHED: 2020-06-04

An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It allows signature validation bypass via a modified file or a file with non-standard signatures.

CVE-2019-20823PUBLISHED: 2020-06-04

An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs.

Support the originator by clicking the read the rest link below.