CVE-2018-18689

The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, a Signature Wrapping vulnerability exists in multiple products. An attacker can use /ByteRange and xref manipulations that are not detected by the signature-validation logic. This affects Foxit Reader before 9.4 and PhantomPDF before 8.3.9 and 9.x before 9.4. It also affects eXpert PDF 12 Ultimate, Expert PDF Reader, Nitro Pro, Nitro Reader, PDF Architect 6, PDF Editor 6 Pro, PDF Experte 9 Ultimate, PDFelement6 Pro, PDF Studio Viewer 2018, PDF Studio Pro, PDF-XChange Editor and Viewer, Perfect PDF 10 Premium, Perfect PDF Reader, Soda PDF, and Soda PDF Desktop.

CVSS v3 5.3 MEDIUM
CVSS v2.0 5.0 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://pdf-insecurity.org/signature/evaluation_2018.html	Third Party Advisory
https://pdf-insecurity.org/signature/signature.html	Third Party Advisory
https://www.foxitsoftware.com/support/security-bulletins.php	Vendor Advisory
https://www.pdfa.org/recently-identified-pdf-digital-signature-vulnerabilities/	Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

OR	cpe:2.3:a:avanquest:expert_pdf_ultimate:12.0.20:::::::*
	cpe:2.3:a:avanquest:pdf_experte_ultimate:9.0.270:::::::*
	cpe:2.3:a:foxitsoftware:foxit_reader:9.1.0:::::::*
	cpe:2.3:a:foxitsoftware:foxit_reader:9.2.0.9297:::::::*
	cpe:2.3:a:foxitsoftware:foxit_reader:9.3.0.10826:::::::*
	cpe:2.3:a:gonitro:nitro_pro:11.0.3.173:::::::*
	cpe:2.3:a:gonitro:nitro_reader:5.5.9.2:::::::*
	cpe:2.3:a:iskysoft:pdf_editor_6:6.4.2.3521::::professional:::
	cpe:2.3:a:iskysoft:pdfelement6:6.8.0.3523::::professional:::
	cpe:2.3:a:iskysoft:pdfelement6:6.8.4.3921::::professional:::
	cpe:2.3:a:pdfforge:pdf_architect:6.0.37:::::::*
	cpe:2.3:a:pdfforge:pdf_architect:6.1.24.1862:::::::*
	cpe:2.3:a:qoppa:pdf_studio:12.0.7::::professional:::
	cpe:2.3:a:qoppa:pdf_studio_viewer_2018:2018.0.1:::::::*
	cpe:2.3:a:qoppa:pdf_studio_viewer_2018:2018.2.0:::::::*
	cpe:2.3:a:sodapdf:soda_pdf:9.3.17:::::::*
	cpe:2.3:a:sodapdf:soda_pdf_desktop:10.2.09:::::::*
	cpe:2.3:a:sodapdf:soda_pdf_desktop:10.2.16.1217:::::::*
	cpe:2.3:a:soft-xpansion:perfect_pdf_10:10.0.0.1::::premium:::
	cpe:2.3:a:soft-xpansion:perfect_pdf_reader:13.0.3:::::::*
	cpe:2.3:a:soft-xpansion:perfect_pdf_reader:13.1.5:::::::*
	cpe:2.3:a:tracker-software:pdf-xchange_editor:7.0.237.1:::::::*
	cpe:2.3:a:tracker-software:pdf-xchange_editor:7.0.326:::::::*
	cpe:2.3:a:tracker-software:pdf-xchange_viewer:2.5:::::::*
	cpe:2.3:a:visagesoft:expert_pdf_reader:9.0.180:::::::*

Configuration 2 (hide)

AND

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

OR	cpe:2.3:a:foxitsoftware:foxit_reader:9.1.0:::::::*
	cpe:2.3:a:foxitsoftware:foxit_reader:9.2.0:::::::*
	cpe:2.3:a:iskysoft:pdf_editor_6:6.6.2.3315::::professional:::
	cpe:2.3:a:iskysoft:pdf_editor_6:6.7.6.3399::::professional:::
	cpe:2.3:a:iskysoft:pdfelement6:6.7.1.3355::::professional:::
	cpe:2.3:a:iskysoft:pdfelement6:6.7.6.3399::::professional:::
	cpe:2.3:a:qoppa:pdf_studio:12.0.7::::professional:::
	cpe:2.3:a:qoppa:pdf_studio_viewer_2018:2018.0.1:::::::*
	cpe:2.3:a:qoppa:pdf_studio_viewer_2018:2018.2.0:::::::*

Configuration 3 (hide)

AND

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

OR	cpe:2.3:a:foxitsoftware:foxit_reader:9.1.0:::::::*
	cpe:2.3:a:foxitsoftware:foxit_reader:9.2.0:::::::*
	cpe:2.3:a:qoppa:pdf_studio:12.0.7::::professional:::
	cpe:2.3:a:qoppa:pdf_studio_viewer_2018:2018.0.1:::::::*
	cpe:2.3:a:qoppa:pdf_studio_viewer_2018:2018.2.0:::::::*

History

No history.

Information

Published : 2021-01-07 18:15

Updated : 2021-01-15 17:07

NVD link : CVE-2018-18689

Mitre link : CVE-2018-18689

CVE.ORG link : CVE-2018-18689

JSON object : View

Products Affected

gonitro

nitro_pro
nitro_reader

sodapdf

soda_pdf
soda_pdf_desktop

tracker-software

pdf-xchange_viewer
pdf-xchange_editor

linux

linux_kernel

qoppa

pdf_studio_viewer_2018
pdf_studio

avanquest

pdf_experte_ultimate
expert_pdf_ultimate

microsoft

windows

visagesoft

expert_pdf_reader

apple

macos

iskysoft

pdfelement6
pdf_editor_6

soft-xpansion

perfect_pdf_10
perfect_pdf_reader

foxitsoftware

foxit_reader

pdfforge

pdf_architect

CWE

CWE-347

Improper Verification of Cryptographic Signature

{"id": "CVE-2018-18689", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2021-01-07T18:15:12.560", "references": [{"url": "https://pdf-insecurity.org/signature/evaluation_2018.html", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://pdf-insecurity.org/signature/signature.html", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.foxitsoftware.com/support/security-bulletins.php", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.pdfa.org/recently-identified-pdf-digital-signature-vulnerabilities/", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-347"}]}], "descriptions": [{"lang": "en", "value": "The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, a Signature Wrapping vulnerability exists in multiple products. An attacker can use /ByteRange and xref manipulations that are not detected by the signature-validation logic. This affects Foxit Reader before 9.4 and PhantomPDF before 8.3.9 and 9.x before 9.4. It also affects eXpert PDF 12 Ultimate, Expert PDF Reader, Nitro Pro, Nitro Reader, PDF Architect 6, PDF Editor 6 Pro, PDF Experte 9 Ultimate, PDFelement6 Pro, PDF Studio Viewer 2018, PDF Studio Pro, PDF-XChange Editor and Viewer, Perfect PDF 10 Premium, Perfect PDF Reader, Soda PDF, and Soda PDF Desktop."}, {"lang": "es", "value": "La especificaci\u00f3n Portable Document Format (PDF) no proporciona ninguna informaci\u00f3n sobre el procedimiento concreto de c\u00f3mo comprobar las firmas. En consecuencia, se presenta una vulnerabilidad de Empaquetamiento de Firma en varios productos. Un atacante puede usar /ByteRange y manipulaciones xref que no son detectadas por la l\u00f3gica de comprobaci\u00f3n de firmas. Esto afecta a Foxit Reader versiones anteriores a 9.4 y PhantomPDF versiones anteriores a 8.3.9 y versiones 9.x anteriores a 9.4. Tambi\u00e9n afecta a eXpert PDF 12 Ultimate, Expert PDF Reader, Nitro Pro, Nitro Reader, PDF Architect 6, PDF Editor 6 Pro, PDF Experte 9 Ultimate, PDFelement6 Pro, PDF Studio Viewer 2018, PDF Studio Pro, PDF-XChange Editor and Viewer , Perfect PDF 10 Premium, Perfect PDF Reader, Soda PDF y Soda PDF Desktop"}], "lastModified": "2021-01-15T17:07:25.060", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:avanquest:expert_pdf_ultimate:12.0.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0998FDC0-7FC7-4A2C-993C-97BC76F27FBD"}, {"criteria": "cpe:2.3:a:avanquest:pdf_experte_ultimate:9.0.270:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CACE318F-ADDC-4B2F-8080-686C7430D12C"}, {"criteria": "cpe:2.3:a:foxitsoftware:foxit_reader:9.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07844440-3F26-40E1-A747-4642FBA9A9FA"}, {"criteria": "cpe:2.3:a:foxitsoftware:foxit_reader:9.2.0.9297:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C0777020-4D36-4651-84D8-561767558118"}, {"criteria": "cpe:2.3:a:foxitsoftware:foxit_reader:9.3.0.10826:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B5DFC3EB-168B-43C9-8C83-6FED38A2D3B2"}, {"criteria": "cpe:2.3:a:gonitro:nitro_pro:11.0.3.173:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7DFA95E4-9780-4B0A-9996-95A257C8DE99"}, {"criteria": "cpe:2.3:a:gonitro:nitro_reader:5.5.9.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B0A3796-4436-4706-A25C-04745B10D6DC"}, {"criteria": "cpe:2.3:a:iskysoft:pdf_editor_6:6.4.2.3521:*:*:*:professional:*:*:*", "vulnerable": true, "matchCriteriaId": "9796785E-F5A4-4EB9-AE4C-3296449F0A27"}, {"criteria": "cpe:2.3:a:iskysoft:pdfelement6:6.8.0.3523:*:*:*:professional:*:*:*", "vulnerable": true, "matchCriteriaId": "C6FE27B0-5187-441A-8824-211838C71F3D"}, {"criteria": "cpe:2.3:a:iskysoft:pdfelement6:6.8.4.3921:*:*:*:professional:*:*:*", "vulnerable": true, "matchCriteriaId": "950C35B2-1B7F-495F-9947-0E992329954B"}, {"criteria": "cpe:2.3:a:pdfforge:pdf_architect:6.0.37:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8AD75B84-647C-46A1-8A6B-E667FDA0FB60"}, {"criteria": "cpe:2.3:a:pdfforge:pdf_architect:6.1.24.1862:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "33E48700-11CF-4992-8FD7-2A19620D36EA"}, {"criteria": "cpe:2.3:a:qoppa:pdf_studio:12.0.7:*:*:*:professional:*:*:*", "vulnerable": true, "matchCriteriaId": "8944C809-795C-4F8F-A593-988B529F08B0"}, {"criteria": "cpe:2.3:a:qoppa:pdf_studio_viewer_2018:2018.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F47F57CB-769C-4ED3-91A4-D6489A8DD432"}, {"criteria": "cpe:2.3:a:qoppa:pdf_studio_viewer_2018:2018.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C0F12D65-A39B-4F36-A219-1AEDD968C9D9"}, {"criteria": "cpe:2.3:a:sodapdf:soda_pdf:9.3.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D234AC23-0D76-4D3F-9CF4-93966728C4CF"}, {"criteria": "cpe:2.3:a:sodapdf:soda_pdf_desktop:10.2.09:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "96109777-AC81-4D51-ACEB-FDB3441A0D9F"}, {"criteria": "cpe:2.3:a:sodapdf:soda_pdf_desktop:10.2.16.1217:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A44A53AE-E8F0-4FAC-9942-F05D29E1B8CF"}, {"criteria": "cpe:2.3:a:soft-xpansion:perfect_pdf_10:10.0.0.1:*:*:*:premium:*:*:*", "vulnerable": true, "matchCriteriaId": "F094FAF3-15CB-4481-9B86-61EABB82AAF6"}, {"criteria": "cpe:2.3:a:soft-xpansion:perfect_pdf_reader:13.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A4F28BFA-F77A-4282-AA60-E25436AF98D1"}, {"criteria": "cpe:2.3:a:soft-xpansion:perfect_pdf_reader:13.1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E808A140-D375-4BE2-9EF1-4A17634ADAC2"}, {"criteria": "cpe:2.3:a:tracker-software:pdf-xchange_editor:7.0.237.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78F2A959-1E6D-4255-B57F-BF66351EF6E8"}, {"criteria": "cpe:2.3:a:tracker-software:pdf-xchange_editor:7.0.326:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BD74AF39-AE51-4767-B30E-BF1D320710EF"}, {"criteria": "cpe:2.3:a:tracker-software:pdf-xchange_viewer:2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8B10625F-4F1D-4C00-AC17-ECBD4A6DEB32"}, {"criteria": "cpe:2.3:a:visagesoft:expert_pdf_reader:9.0.180:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "14B07BD4-0FC3-4471-B58B-2ADBA36B08D6"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:foxitsoftware:foxit_reader:9.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07844440-3F26-40E1-A747-4642FBA9A9FA"}, {"criteria": "cpe:2.3:a:foxitsoftware:foxit_reader:9.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4B8E8F6D-8560-42D6-AED5-91D0570A4A13"}, {"criteria": "cpe:2.3:a:iskysoft:pdf_editor_6:6.6.2.3315:*:*:*:professional:*:*:*", "vulnerable": true, "matchCriteriaId": "80241CB1-3BC7-4572-92A4-E348C50FAE9A"}, {"criteria": "cpe:2.3:a:iskysoft:pdf_editor_6:6.7.6.3399:*:*:*:professional:*:*:*", "vulnerable": true, "matchCriteriaId": "8336F6DF-0677-4AED-B062-0E7957A7A293"}, {"criteria": "cpe:2.3:a:iskysoft:pdfelement6:6.7.1.3355:*:*:*:professional:*:*:*", "vulnerable": true, "matchCriteriaId": "1D3941F4-B294-4E22-A6FF-CF3085DF6C89"}, {"criteria": "cpe:2.3:a:iskysoft:pdfelement6:6.7.6.3399:*:*:*:professional:*:*:*", "vulnerable": true, "matchCriteriaId": "1A3DB79B-12A7-4E55-9499-36EED6688382"}, {"criteria": "cpe:2.3:a:qoppa:pdf_studio:12.0.7:*:*:*:professional:*:*:*", "vulnerable": true, "matchCriteriaId": "8944C809-795C-4F8F-A593-988B529F08B0"}, {"criteria": "cpe:2.3:a:qoppa:pdf_studio_viewer_2018:2018.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F47F57CB-769C-4ED3-91A4-D6489A8DD432"}, {"criteria": "cpe:2.3:a:qoppa:pdf_studio_viewer_2018:2018.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C0F12D65-A39B-4F36-A219-1AEDD968C9D9"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:foxitsoftware:foxit_reader:9.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07844440-3F26-40E1-A747-4642FBA9A9FA"}, {"criteria": "cpe:2.3:a:foxitsoftware:foxit_reader:9.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4B8E8F6D-8560-42D6-AED5-91D0570A4A13"}, {"criteria": "cpe:2.3:a:qoppa:pdf_studio:12.0.7:*:*:*:professional:*:*:*", "vulnerable": true, "matchCriteriaId": "8944C809-795C-4F8F-A593-988B529F08B0"}, {"criteria": "cpe:2.3:a:qoppa:pdf_studio_viewer_2018:2018.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F47F57CB-769C-4ED3-91A4-D6489A8DD432"}, {"criteria": "cpe:2.3:a:qoppa:pdf_studio_viewer_2018:2018.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C0F12D65-A39B-4F36-A219-1AEDD968C9D9"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}

5.3 /10

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0 /10

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

JSON object

Attach tags to CVE-2018-18689

5.3^/10

5.0^/10

Attach tags to `CVE-2018-18689`