CVE-2015-8843
Foxit FoxitCloudUpdateService Local Privilege Escalation Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local users to gain privileges by writing crafted data to a shared memory region, which triggers memory corruption.
El Foxit Cloud Update Service (FoxitCloudUpdateService) en Foxit Reader 6.1 hasta la versión 6.2.x y 7.x en versiones anteriores a 7.2.2, cuando una actualización para el plugin Cloud está disponible, permite a usuarios locales obtener privilegios escribiendo datos manipulados a una región de memoria compartida, lo que desencadena una corrupción de memoria.
This vulnerability allows local attackers to elevate privileges on vulnerable installations of Foxit Reader. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the FoxitCloudUpdateService service. An attacker can trigger a memory corruption condition by writing certain data to a shared memory region. An attacker can leverage this vulnerability to execute code under the context of SYSTEM.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2015-12-15 CVE Published
- 2016-04-13 CVE Reserved
- 2024-09-16 CVE Updated
- 2024-11-06 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://www.zerodayinitiative.com/advisories/ZDI-15-640 | X_refsource_misc |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.foxitsoftware.com/support/security-bulletins.php#FRD-35 | 2016-04-19 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Foxitsoftware Search vendor "Foxitsoftware" | Foxit Reader Search vendor "Foxitsoftware" for product "Foxit Reader" | 6.1 Search vendor "Foxitsoftware" for product "Foxit Reader" and version "6.1" | - |
Affected
| ||||||
| Foxitsoftware Search vendor "Foxitsoftware" | Foxit Reader Search vendor "Foxitsoftware" for product "Foxit Reader" | 6.1.2 Search vendor "Foxitsoftware" for product "Foxit Reader" and version "6.1.2" | - |
Affected
| ||||||
| Foxitsoftware Search vendor "Foxitsoftware" | Foxit Reader Search vendor "Foxitsoftware" for product "Foxit Reader" | 6.1.4 Search vendor "Foxitsoftware" for product "Foxit Reader" and version "6.1.4" | - |
Affected
| ||||||
| Foxitsoftware Search vendor "Foxitsoftware" | Foxit Reader Search vendor "Foxitsoftware" for product "Foxit Reader" | 6.2 Search vendor "Foxitsoftware" for product "Foxit Reader" and version "6.2" | - |
Affected
| ||||||
| Foxitsoftware Search vendor "Foxitsoftware" | Foxit Reader Search vendor "Foxitsoftware" for product "Foxit Reader" | 6.2.1 Search vendor "Foxitsoftware" for product "Foxit Reader" and version "6.2.1" | - |
Affected
| ||||||
| Foxitsoftware Search vendor "Foxitsoftware" | Foxit Reader Search vendor "Foxitsoftware" for product "Foxit Reader" | 7.0 Search vendor "Foxitsoftware" for product "Foxit Reader" and version "7.0" | - |
Affected
| ||||||
| Foxitsoftware Search vendor "Foxitsoftware" | Foxit Reader Search vendor "Foxitsoftware" for product "Foxit Reader" | 7.0.1 Search vendor "Foxitsoftware" for product "Foxit Reader" and version "7.0.1" | - |
Affected
| ||||||
| Foxitsoftware Search vendor "Foxitsoftware" | Foxit Reader Search vendor "Foxitsoftware" for product "Foxit Reader" | 7.0.6 Search vendor "Foxitsoftware" for product "Foxit Reader" and version "7.0.6" | - |
Affected
| ||||||
| Foxitsoftware Search vendor "Foxitsoftware" | Foxit Reader Search vendor "Foxitsoftware" for product "Foxit Reader" | 7.1.5 Search vendor "Foxitsoftware" for product "Foxit Reader" and version "7.1.5" | - |
Affected
| ||||||
| Foxitsoftware Search vendor "Foxitsoftware" | Foxit Reader Search vendor "Foxitsoftware" for product "Foxit Reader" | 7.2 Search vendor "Foxitsoftware" for product "Foxit Reader" and version "7.2" | - |
Affected
| ||||||