CVE-2015-2789
published 2015-03-30CVE-2015-2789: Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users…
PriorityP426medium4.4CVSS 2.0
AVLACMAuNCPIPAP
EXPLOIT
EPSS
3.19%
86.5th percentile
Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| foxitsoftware | foxit_reader | — | — |
| foxitsoftware | foxit_reader | — | — |
| foxitsoftware | foxit_reader | — | — |
| foxitsoftware | foxit_reader | — | — |
| foxitsoftware | foxit_reader | — | — |
| foxitsoftware | foxit_reader | — | — |
| foxitsoftware | foxit_reader | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://packetstormsecurity.com/files/130840/Foxit-Reader-7.0.6.1126-Privilege-Escalation.htmlhttp://www.exploit-db.com/exploits/36390http://www.foxitsoftware.com/support/security_bulletins.php#FRD-25http://www.securityfocus.com/bid/73432http://www.securitytracker.com/id/1031879http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5235.phphttp://packetstormsecurity.com/files/130840/Foxit-Reader-7.0.6.1126-Privilege-Escalation.htmlhttp://www.exploit-db.com/exploits/36390http://www.foxitsoftware.com/support/security_bulletins.php#FRD-25http://www.securityfocus.com/bid/73432http://www.securitytracker.com/id/1031879http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5235.php
2015-03-30
Published