CVE-2015-8843 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Foxit Reader

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources
Severity
7.4HIGHNVD
EPSS
0.0%
top 99.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Foxitsoftware Foxit Reader
Timeline
PublishedApr 13
Latest updateMay 17

Description

The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local users to gain privileges by writing crafted data to a shared memory region, which triggers memory corruption.

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 1.4 | Impact: 5.9

Affected Packages1 packages

▶NVDfoxitsoftware/foxit_reader10 versions+9

Patches

Patch: www.foxitsoftware.com ↗Patch: www.foxitsoftware.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-rw82-83m8-mfj2: The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6↗2022-05-17
▶
CVEList
CVE-2015-8843: The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6↗2016-04-13
▶
CVE-2015-8843 — Foxit Reader vulnerability | cvebase