CVSS 7.8 · High EPSS 0,28%
Kerentanan Incorrect Permission Assignment for Critical Resource pada foxit pdf editor, foxit pdf reader. Skor CVSS 3.1 7.8 (High) menurut NVD.
Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the configuration files used by the Foxit Reader Update Service. The issue results from incorrect permissions set on a resource used by the service. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of SYSTEM. Was ZDI-CAN-23933.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| foxit | pdf editor | Semua versi hingga 11.2.10.53951 |
| foxit | pdf editor | Versi 12.0 hingga 12.1.7.15526 |
| foxit | pdf editor | Versi 13.0 hingga 13.1.3.22478 |
| foxit | pdf editor | Versi 2023.0 hingga 2023.3.0.23028 |
| foxit | pdf editor | Versi 2024.0 hingga 2024.2.3.25184 |
| foxit | pdf reader | Semua versi hingga 2024.2.3.25184 |