An issue was discovered in Foxit PhantomPDF Mac and Foxit Reader for Mac before 4.0. It allows signature validation bypass via a modified file or a file with non-standard signatures.
The product does not verify, or incorrectly verifies, the cryptographic signature for data.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Phantompdf | Foxitsoftware | * | 4.0 (excluding) |
| Reader | Foxitsoftware | * | 4.0 (excluding) |