medium4.4Public exploit code
CVE-2015-2789
Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Foxit Reader 7.0.6.1126 - Unquoted Service Path Privilege Escalation2015-03-16 · local · windows
Impact
Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Foxitsoftware | Foxit Reader | Versions 6.1, 6.1.2, 6.1.4, 6.2, 6.2.1, 7.0 |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/130840/Foxit-Reader-7.0.6.1126-Privilege-Escalation.html
- http://www.exploit-db.com/exploits/36390
- http://www.foxitsoftware.com/support/security_bulletins.php#FRD-25
- http://www.securityfocus.com/bid/73432
- http://www.securitytracker.com/id/1031879
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5235.php
- http://packetstormsecurity.com/files/130840/Foxit-Reader-7.0.6.1126-Privilege-Escalation.html
- http://www.exploit-db.com/exploits/36390
- http://www.foxitsoftware.com/support/security_bulletins.php#FRD-25
- http://www.securityfocus.com/bid/73432
- http://www.securitytracker.com/id/1031879
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5235.php