PT-2015-5896
CVE-2015-2789
·
تاريخ النشر
2015-03-30
·
تاريخ التحديث
2016-12-03
الوصف من
CVSS 2.0
4.4
متوسطةالمقاييسAV:L/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Foxit Reader versions 6.1 through 7.0.6.1126
Description
The issue is related to an unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service within the Cloud plugin. This allows local users to potentially gain privileges by placing a Trojan horse program in the %SYSTEMDRIVE% folder.
Recommendations
For Foxit Reader versions 6.1 through 7.0.6.1126, update to a version that includes the fix for this issue to prevent potential privilege escalation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾