CVE-2015-2789
Foxit Reader 7.0.6.1126 - Unquoted Service Path Privilege Escalation
Severity Score
4.4
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
3
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder.
Vulnerabilidad de búsqueda de ruta en Windows sin entrecomillar en el servicio de actualizaciones seguras Foxit Cloud en el plugin Cloud en Foxit Reader 6.1 hasta 7.0.6.1126 permite a usuarios locales ganar privilegios a través de un programa troyano en la carpeta %SYSTEMDRIVE%.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-03-16 First Exploit
- 2015-03-30 CVE Reserved
- 2015-03-30 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (7)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/73432 | Vdb Entry | |
| http://www.securitytracker.com/id/1031879 | Third Party Advisory | |
| http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5235.php | Third Party Advisory |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/36390 | 2015-03-16 | |
| http://packetstormsecurity.com/files/130840/Foxit-Reader-7.0.6.1126-Privilege-Escalation.html | 2024-08-06 | |
| http://www.exploit-db.com/exploits/36390 | 2024-08-06 |
| URL | Date | SRC |
|---|---|---|
| http://www.foxitsoftware.com/support/security_bulletins.php#FRD-25 | 2016-12-03 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Foxitsoftware Search vendor "Foxitsoftware" | Foxit Reader Search vendor "Foxitsoftware" for product "Foxit Reader" | 6.1 Search vendor "Foxitsoftware" for product "Foxit Reader" and version "6.1" | - |
Affected
| ||||||
| Foxitsoftware Search vendor "Foxitsoftware" | Foxit Reader Search vendor "Foxitsoftware" for product "Foxit Reader" | 6.1.2 Search vendor "Foxitsoftware" for product "Foxit Reader" and version "6.1.2" | - |
Affected
| ||||||
| Foxitsoftware Search vendor "Foxitsoftware" | Foxit Reader Search vendor "Foxitsoftware" for product "Foxit Reader" | 6.1.4 Search vendor "Foxitsoftware" for product "Foxit Reader" and version "6.1.4" | - |
Affected
| ||||||
| Foxitsoftware Search vendor "Foxitsoftware" | Foxit Reader Search vendor "Foxitsoftware" for product "Foxit Reader" | 6.2 Search vendor "Foxitsoftware" for product "Foxit Reader" and version "6.2" | - |
Affected
| ||||||
| Foxitsoftware Search vendor "Foxitsoftware" | Foxit Reader Search vendor "Foxitsoftware" for product "Foxit Reader" | 6.2.1 Search vendor "Foxitsoftware" for product "Foxit Reader" and version "6.2.1" | - |
Affected
| ||||||
| Foxitsoftware Search vendor "Foxitsoftware" | Foxit Reader Search vendor "Foxitsoftware" for product "Foxit Reader" | 7.0 Search vendor "Foxitsoftware" for product "Foxit Reader" and version "7.0" | - |
Affected
| ||||||
| Foxitsoftware Search vendor "Foxitsoftware" | Foxit Reader Search vendor "Foxitsoftware" for product "Foxit Reader" | 7.0.6 Search vendor "Foxitsoftware" for product "Foxit Reader" and version "7.0.6" | - |
Affected
| ||||||