On the security of PDF Signatures

Assumed to be secure for 15 years, our talk reveals what could go wrong while a PDF document is being verified. We elaborated novel attacks leading to critical vulnerabilities in all PDF viewers, most notably in Adobe, Foxit, and LibreOffice. As a result, an attacker can manipulate the content of digitally signed PDFs arbitrarily while … Read more