CVE:CVE-2018-18689
CNNVD:CNNVD-201901-074
Foxit Reader和Foxit PhantomPDF for Windows都是中国福昕（Foxit）公司的产品。Foxit Reader是一款PDF文档阅读器。Foxit PhantomPDF for Windows是一款基于Windows平台的PDF文档阅读器。
基于Windows平台的Foxit Reader 9.3.0.10826及之前版本和PhantomPDF 9.3.0.10826及之前版本中存在安全漏洞。攻击者可借助PDF文件利用该漏洞绕过签名验证并提供不正确的检测结果。
solution:Upgrade avanquest expert_pdf_ultimate to a higher version than 12.0.20,and avoid the version 12.0.20; Upgrade avanquest pdf_experte_ultimate to a higher version than 9.0.270,and avoid the version 9.0.270; Upgrade foxitsoftware foxit_reader to a higher version than 9.1.0,9.2.0.9297,9.3.0.10826,9.2.0,and avoid the version 9.1.0,9.2.0.9297,9.3.0.10826,9.2.0; Upgrade gonitro nitro_pro to a higher version than 11.0.3.173,and avoid the version 11.0.3.173; Upgrade gonitro nitro_reader to a higher version than 5.5.9.2,and avoid the version 5.5.9.2; Upgrade iskysoft pdf_editor_6 to a higher version than 6.4.2.3521,6.6.2.3315,6.7.6.3399,and avoid the version 6.4.2.3521,6.6.2.3315,6.7.6.3399; Upgrade iskysoft pdfelement6 to a higher version than 6.8.0.3523,6.8.4.3921,6.7.1.3355,6.7.6.3399,and avoid the version 6.8.0.3523,6.8.4.3921,6.7.1.3355,6.7.6.3399; Upgrade pdfforge pdf_architect to a higher version than 6.0.37,6.1.24.1862,and avoid the version 6.0.37,6.1.24.1862; Upgrade qoppa pdf_studio to a higher version than 12.0.7,and avoid the version 12.0.7; Upgrade qoppa pdf_studio_viewer_2018 to a higher version than 2018.0.1,2018.2.0,and avoid the version 2018.0.1,2018.2.0; Upgrade sodapdf soda_pdf to a higher version than 9.3.17,and avoid the version 9.3.17; Upgrade sodapdf soda_pdf_desktop to a higher version than 10.2.09,10.2.16.1217,and avoid the version 10.2.09,10.2.16.1217; Upgrade soft-xpansion perfect_pdf_10 to a higher version than 10.0.0.1,and avoid the version 10.0.0.1; Upgrade soft-xpansion perfect_pdf_reader to a higher version than 13.0.3,13.1.5,and avoid the version 13.0.3,13.1.5; Upgrade tracker-software pdf-xchange_editor to a higher version than 7.0.237.1,7.0.326,and avoid the version 7.0.237.1,7.0.326; Upgrade tracker-software pdf-xchange_viewer to a higher version than 2.5,and avoid the version 2.5; Upgrade visagesoft expert_pdf_reader to a higher version than 9.0.180,and avoid the version 9.0.180