PT-2021-20323 · Foxit · Foxit Reader+1

Published 2021-08-11 · Updated 2021-08-12 · CVE-2021-33794

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Foxit Reader versions prior to 10.1.4 PhantomPDF versions prior to 10.1.4

Description: The issue allows information disclosure or an application crash after mishandling the Tab key during XFA form interaction.

Recommendations: For Foxit Reader versions prior to 10.1.4, update to version 10.1.4 or later to resolve the issue. For PhantomPDF versions prior to 10.1.4, update to version 10.1.4 or later to resolve the issue.

Fix

Related Identifiers

CVE-2021-33794

Affected Products

Foxit Reader

Phantompdf

References · 4

• https://foxitsoftware.com/support/security-bulletins.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-33794 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-33794 · Security Note
• https://t.me/cibsecurity/27203 · Telegram Post