{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-05-03T07:48:29.251","vulnerabilities":[{"cve":{"id":"CVE-2018-18688","sourceIdentifier":"cve@mitre.org","published":"2021-01-07T18:15:12.497","lastModified":"2024-11-21T03:56:22.390","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or annotations, Body Updates are displayed to the user without any action by the signature-validation logic. This affects Foxit Reader before 9.4 and PhantomPDF before 8.3.9 and 9.x before 9.4. It also affects LibreOffice, Master PDF Editor, Nitro Pro, Nitro Reader, Nuance Power PDF Standard, PDF Editor 6 Pro, PDFelement6 Pro, PDF Studio Viewer 2018, PDF Studio Pro, Perfect PDF 10 Premium, and Perfect PDF Reader."},{"lang":"es","value":"La especificación Portable Document Format (PDF) no proporciona ninguna información sobre el procedimiento concreto de cómo comprobar las firmas. En consecuencia, se presenta una vulnerabilidad de Ahorro Incremental en varios productos. Cuando un atacante usa la función Ahorro Incremental para agregar páginas o anotaciones, las actualizaciones del cuerpo se muestran al usuario sin que la lógica de comprobación de firmas realice ninguna acción. Esto afecta a Foxit Reader versiones anteriores a 9.4 y PhantomPDF versiones anteriores a 8.3.9 y versiones 9.x anteriores a 9.4. También afecta a LibreOffice, Master PDF Editor, Nitro Pro, Nitro Reader, Nuance Power PDF Standard, PDF Editor 6 Pro, PDFelement6 Pro, PDF Studio Viewer 2018, PDF Studio Pro, Perfect PDF 10 Premium y Perfect PDF Reader"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:code-industry:master_pdf_editor:5.1.12:*:*:*:*:*:*:*","matchCriteriaId":"2E15C7D9-4587-4C0B-8E97-F2967C345164"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-industry:master_pdf_editor:5.1.68:*:*:*:*:*:*:*","matchCriteriaId":"6DB1198D-3C50-4112-8FBD-80BAEC085962"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:9.4:*:*:*:*:*:*:*","matchCriteriaId":"8205B855-D8D6-44AB-99F8-B9773854F3CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0","versionEndExcluding":"9.4","matchCriteriaId":"CE7DA80D-4E97-442A-9C55-43E579C54E9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:phantompdf:8.3.9:*:*:*:*:*:*:*","matchCriteriaId":"B951C818-618B-4E28-8882-64083FD31F08"},{"vulnerable":true,"criteria":"cpe:2.3:a:gonitro:nitro_pro:11.0.3.173:*:*:*:*:*:*:*","matchCriteriaId":"7DFA95E4-9780-4B0A-9996-95A257C8DE99"},{"vulnerable":true,"criteria":"cpe:2.3:a:gonitro:nitro_reader:5.5.9.2:*:*:*:*:*:*:*","matchCriteriaId":"5B0A3796-4436-4706-A25C-04745B10D6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:iskysoft:pdf_editor_6:6.4.2.3521:*:*:*:professional:*:*:*","matchCriteriaId":"9796785E-F5A4-4EB9-AE4C-3296449F0A27"},{"vulnerable":true,"criteria":"cpe:2.3:a:iskysoft:pdfelement6:6.8.0.3523:*:*:*:professional:*:*:*","matchCriteriaId":"C6FE27B0-5187-441A-8824-211838C71F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:iskysoft:pdfelement6:6.8.4.3921:*:*:*:professional:*:*:*","matchCriteriaId":"950C35B2-1B7F-495F-9947-0E992329954B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libreoffice:libreoffice:6.0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"D3CC1399-3DEF-4385-8B71-3F11DA88F331"},{"vulnerable":true,"criteria":"cpe:2.3:a:libreoffice:libreoffice:6.1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"699BE7A2-190A-43AC-9C63-4C8484FA465C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nuance:power_pdf_standard:3.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"231818D4-C87B-4B0E-9ADD-B1332B92273D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nuance:power_pdf_standard:3.0.0.30:*:*:*:*:*:*:*","matchCriteriaId":"F8E33DF5-2430-4AFC-A725-08FBD20C6749"},{"vulnerable":true,"criteria":"cpe:2.3:a:nuance:power_pdf_standard:7.0:*:*:*:*:*:*:*","matchCriteriaId":"5D8BE4D0-7106-47CA-9ADB-F4350CE2A527"},{"vulnerable":true,"criteria":"cpe:2.3:a:qoppa:pdf_studio:12.0.7:*:*:*:professional:*:*:*","matchCriteriaId":"8944C809-795C-4F8F-A593-988B529F08B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:qoppa:pdf_studio_viewer_2018:2018.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F47F57CB-769C-4ED3-91A4-D6489A8DD432"},{"vulnerable":true,"criteria":"cpe:2.3:a:qoppa:pdf_studio_viewer_2018:2018.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C0F12D65-A39B-4F36-A219-1AEDD968C9D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:soft-xpansion:perfect_pdf_10:10.0.0.1:*:*:*:premium:*:*:*","matchCriteriaId":"F094FAF3-15CB-4481-9B86-61EABB82AAF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:soft-xpansion:perfect_pdf_reader:13.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A4F28BFA-F77A-4282-AA60-E25436AF98D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:soft-xpansion:perfect_pdf_reader:13.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E808A140-D375-4BE2-9EF1-4A17634ADAC2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:code-industry:master_pdf_editor:5.1.12:*:*:*:*:*:*:*","matchCriteriaId":"2E15C7D9-4587-4C0B-8E97-F2967C345164"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-industry:master_pdf_editor:5.1.68:*:*:*:*:*:*:*","matchCriteriaId":"6DB1198D-3C50-4112-8FBD-80BAEC085962"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:9.1.0:*:*:*:*:*:*:*","matchCriteriaId":"07844440-3F26-40E1-A747-4642FBA9A9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4B8E8F6D-8560-42D6-AED5-91D0570A4A13"},{"vulnerable":true,"criteria":"cpe:2.3:a:libreoffice:libreoffice:6.0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"D3CC1399-3DEF-4385-8B71-3F11DA88F331"},{"vulnerable":true,"criteria":"cpe:2.3:a:libreoffice:libreoffice:6.1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"699BE7A2-190A-43AC-9C63-4C8484FA465C"},{"vulnerable":true,"criteria":"cpe:2.3:a:qoppa:pdf_studio:12.0.7:*:*:*:professional:*:*:*","matchCriteriaId":"8944C809-795C-4F8F-A593-988B529F08B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:qoppa:pdf_studio_viewer_2018:2018.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F47F57CB-769C-4ED3-91A4-D6489A8DD432"},{"vulnerable":true,"criteria":"cpe:2.3:a:qoppa:pdf_studio_viewer_2018:2018.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C0F12D65-A39B-4F36-A219-1AEDD968C9D9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:code-industry:master_pdf_editor:5.1.24:*:*:*:*:*:*:*","matchCriteriaId":"3B32744C-FC60-4E12-AF11-69D146A7F6A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-industry:master_pdf_editor:5.1.68:*:*:*:*:*:*:*","matchCriteriaId":"6DB1198D-3C50-4112-8FBD-80BAEC085962"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:9.1.0:*:*:*:*:*:*:*","matchCriteriaId":"07844440-3F26-40E1-A747-4642FBA9A9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4B8E8F6D-8560-42D6-AED5-91D0570A4A13"},{"vulnerable":true,"criteria":"cpe:2.3:a:iskysoft:pdf_editor_6:6.6.2.3315:*:*:*:professional:*:*:*","matchCriteriaId":"80241CB1-3BC7-4572-92A4-E348C50FAE9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:iskysoft:pdf_editor_6:6.7.6.3399:*:*:*:professional:*:*:*","matchCriteriaId":"8336F6DF-0677-4AED-B062-0E7957A7A293"},{"vulnerable":true,"criteria":"cpe:2.3:a:iskysoft:pdfelement6:6.7.1.3355:*:*:*:professional:*:*:*","matchCriteriaId":"1D3941F4-B294-4E22-A6FF-CF3085DF6C89"},{"vulnerable":true,"criteria":"cpe:2.3:a:iskysoft:pdfelement6:6.7.6.3399:*:*:*:professional:*:*:*","matchCriteriaId":"1A3DB79B-12A7-4E55-9499-36EED6688382"},{"vulnerable":true,"criteria":"cpe:2.3:a:libreoffice:libreoffice:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F0657DEE-5DB0-487A-BA8F-7341C5004700"},{"vulnerable":true,"criteria":"cpe:2.3:a:libreoffice:libreoffice:6.1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"699BE7A2-190A-43AC-9C63-4C8484FA465C"},{"vulnerable":true,"criteria":"cpe:2.3:a:qoppa:pdf_studio:12.0.7:*:*:*:professional:*:*:*","matchCriteriaId":"8944C809-795C-4F8F-A593-988B529F08B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:qoppa:pdf_studio_viewer_2018:2018.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F47F57CB-769C-4ED3-91A4-D6489A8DD432"},{"vulnerable":true,"criteria":"cpe:2.3:a:qoppa:pdf_studio_viewer_2018:2018.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C0F12D65-A39B-4F36-A219-1AEDD968C9D9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*","matchCriteriaId":"387021A0-AF36-463C-A605-32EA7DAC172E"}]}]}],"references":[{"url":"https://pdf-insecurity.org/signature/evaluation_2018.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://pdf-insecurity.org/signature/signature.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.foxitsoftware.com/support/security-bulletins.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.pdfa.org/recently-identified-pdf-digital-signature-vulnerabilities/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://pdf-insecurity.org/signature/evaluation_2018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://pdf-insecurity.org/signature/signature.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.foxitsoftware.com/support/security-bulletins.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.pdfa.org/recently-identified-pdf-digital-signature-vulnerabilities/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}}]}