CVE-2015-2789 Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse pr...
MediumCVSS 4.4
EPSS 3.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| foxitsoftware foxit reader | = 6.1 | No fix listed |
| foxitsoftware foxit reader | = 6.1.2 | No fix listed |
| foxitsoftware foxit reader | = 6.1.4 | No fix listed |
| foxitsoftware foxit reader | = 6.2 | No fix listed |
| foxitsoftware foxit reader | = 6.2.1 | No fix listed |
| foxitsoftware foxit reader | = 7.0 | No fix listed |
| foxitsoftware foxit reader | = 7.0.6 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 36390 exploit third-party-advisory vdb-entry
- www.foxitsoftware.com patch vendor-advisory
- 73432 vdb-entry
- 1031879 third-party-advisory vdb-entry
- www.zeroscience.mk third-party-advisory