CVE-2025-59802

{"id": "CVE-2025-59802", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-59802", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-11T15:49:25.647860Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2025-12-11T16:16:26.807", "references": [{"url": "https://www.foxit.com/support/security-bulletins.html", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-290"}]}], "descriptions": [{"lang": "en", "value": "Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via OCG. When Optional Content Groups (OCG) are supported, the state property of an OCG is runtime-only and not included in the digital signature computation buffer. An attacker can leverage JavaScript or PDF triggers to dynamically change the visibility of OCG content after signing (Post-Sign), allowing the visual content of a signed PDF to be modified without invalidating the signature. This may result in a mismatch between the signed content and what the signer or verifier sees, undermining the trustworthiness of the digital signature. The fixed versions are 2025.2.1, 14.0.1, and 13.2.1."}, {"lang": "es", "value": "Foxit PDF Editor y Reader anteriores a 2025.2.1 permiten la suplantaci\u00f3n de firmas a trav\u00e9s de OCG. Cuando se admiten los Grupos de Contenido Opcional (OCG), la propiedad de estado de un OCG es solo en tiempo de ejecuci\u00f3n y no se incluye en el b\u00fafer de c\u00e1lculo de la firma digital. Un atacante puede aprovechar JavaScript o activadores de PDF para cambiar din\u00e1micamente la visibilidad del contenido OCG despu\u00e9s de la firma (Post-Firma), permitiendo que el contenido visual de un PDF firmado sea modificado sin invalidar la firma. Esto puede resultar en una discrepancia entre el contenido firmado y lo que ve el firmante o el verificador, socavando la fiabilidad de la firma digital. Las versiones corregidas son 2025.2.1, 14.0.1 y 13.2.1."}], "lastModified": "2026-10-14T21:10:00.183", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "98F66B0B-2720-49C7-8FEF-42F039A47893", "versionEndIncluding": "13.2.0.63256"}, {"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D8785CCE-C44C-4908-9133-13A580D5BECB", "versionEndIncluding": "2023.3.0.63083", "versionStartIncluding": "2023.1.0.55583"}, {"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CF043D20-0E28-481C-8756-D1301FAE67D2", "versionEndIncluding": "2024.4.1.66479", "versionStartIncluding": "2024.1.0.63682"}, {"criteria": "cpe:2.3:a:foxit:pdf_editor:14.0.0.68868:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BEC6BB18-E885-4970-A74F-AE84FF80C9B7"}, {"criteria": "cpe:2.3:a:foxit:pdf_editor:2025.1.0.66692:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E0FF839F-37E7-4AFA-85B1-FC98366B14E8"}, {"criteria": "cpe:2.3:a:foxit:pdf_editor:2025.2.0.68868:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8869E158-A89B-4850-B7CD-A87A37EDFFB6"}, {"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E5DC4E55-7875-4716-9520-0A7393516AF1", "versionEndIncluding": "2025.2.0.68868"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CDAE2F8C-A99D-418B-84D8-AC1D9CC77411", "versionEndIncluding": "13.2.0.23874"}, {"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C75FEE6-54F3-49C6-BAEA-A09D23BE5D64", "versionEndIncluding": "2023.3.0.23028", "versionStartIncluding": "2023.1.0.15510"}, {"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C06BC41-9831-4AE3-B10B-3FC313D01580", "versionEndIncluding": "2024.4.1.27687", "versionStartIncluding": "2024.1.0.23997"}, {"criteria": "cpe:2.3:a:foxit:pdf_editor:14.0.0.33046:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "31590014-7822-4C3F-8A12-15E6D87CB689"}, {"criteria": "cpe:2.3:a:foxit:pdf_editor:2025.1.0.27937:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9FDC914F-B999-4233-8BEA-CA20B1F0D9D3"}, {"criteria": "cpe:2.3:a:foxit:pdf_editor:2025.2.0.33046:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BFFEC0E6-522C-4680-9A24-AD6FB023014C"}, {"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB84418F-2B66-4F22-8300-A893A3D0FA83", "versionEndIncluding": "2025.2.0.33046"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}