NetSight
IP …
high8.2

CVE-2024-29072

A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138.

Impact

A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the updater executable before executing it. A low privilege user can trigger the update action which can result in unexpected elevation of privilege.

Affected products

VendorProductAffected versions
FoxitPdf Editor
through 11.2.9.53938
from 12.0.0 through 12.1.6.15509
from 13.0.0 through 13.1.1.22432
from 2023.1.0.15510 through 2023.3.0.23028
from 2024.1.0.23997 through 2024.2.1.25153
FoxitPdf Reader
through 2024.2.1.25153

Weakness classification

CWE-295

References