CVE:CVE-2018-18688
CNNVD:CNNVD-201901-076
Foxit Reader和Foxit PhantomPDF都是中国福昕（Foxit）公司的一款PDF文档阅读器。
Foxit Reader 9.3.0.10826及之前版本和PhantomPDF 9.3.0.10826及之前版本基于Windows平台存在数据伪造问题漏洞。攻击者可借助PDF文件利用该漏洞绕过签名验证并提供不正确的检测结果。
solution:Upgrade code-industry master_pdf_editor to a higher version than 5.1.12,5.1.68,5.1.24,and avoid the version 5.1.12,5.1.68,5.1.24; Upgrade foxitsoftware foxit_reader to a higher version than 9.4,9.1.0,9.2.0,and avoid the version 9.4,9.1.0,9.2.0; Upgrade foxitsoftware phantompdf to a higher version than 9.4,8.3.9,and avoid the version [9.0,9.4),8.3.9; Upgrade gonitro nitro_pro to a higher version than 11.0.3.173,and avoid the version 11.0.3.173; Upgrade gonitro nitro_reader to a higher version than 5.5.9.2,and avoid the version 5.5.9.2; Upgrade iskysoft pdf_editor_6 to a higher version than 6.4.2.3521,6.6.2.3315,6.7.6.3399,and avoid the version 6.4.2.3521,6.6.2.3315,6.7.6.3399; Upgrade iskysoft pdfelement6 to a higher version than 6.8.0.3523,6.8.4.3921,6.7.1.3355,6.7.6.3399,and avoid the version 6.8.0.3523,6.8.4.3921,6.7.1.3355,6.7.6.3399; Upgrade libreoffice libreoffice to a higher version than 6.0.6.2,6.1.3.2,6.1.0.3,and avoid the version 6.0.6.2,6.1.3.2,6.1.0.3; Upgrade nuance power_pdf_standard to a higher version than 3.0.0.17,3.0.0.30,7.0,and avoid the version 3.0.0.17,3.0.0.30,7.0; Upgrade qoppa pdf_studio to a higher version than 12.0.7,and avoid the version 12.0.7; Upgrade qoppa pdf_studio_viewer_2018 to a higher version than 2018.0.1,2018.2.0,and avoid the version 2018.0.1,2018.2.0; Upgrade soft-xpansion perfect_pdf_10 to a higher version than 10.0.0.1,and avoid the version 10.0.0.1; Upgrade soft-xpansion perfect_pdf_reader to a higher version than 13.0.3,13.1.5,and avoid the version 13.0.3,13.1.5