CVE Vulnerabilities

CVE-2015-2789

Published: Mar 30, 2015 | Modified: Dec 03, 2016
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.4 MEDIUM
AV:L/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder.

Affected Software

Name Vendor Start Version End Version
Foxit_reader Foxitsoftware 6.1 (including) 6.1 (including)
Foxit_reader Foxitsoftware 6.1.2 (including) 6.1.2 (including)
Foxit_reader Foxitsoftware 6.1.4 (including) 6.1.4 (including)
Foxit_reader Foxitsoftware 6.2 (including) 6.2 (including)
Foxit_reader Foxitsoftware 6.2.1 (including) 6.2.1 (including)
Foxit_reader Foxitsoftware 7.0 (including) 7.0 (including)
Foxit_reader Foxitsoftware 7.0.6 (including) 7.0.6 (including)

References