Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the handling of the configuration files used by the Foxit Reader Update Service. The issue results from incorrect permissions set on a resource used by the service. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of SYSTEM. Was ZDI-CAN-23966.
Metrics
Affected Vendors & Products
References
History
Fri, 29 Nov 2024 18:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Foxit pdf Editor
|
|
CPEs | cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:windows:*:* cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:windows:*:* |
|
Vendors & Products |
Foxit pdf Editor
|
|
Metrics |
cvssV3_1
|
Tue, 26 Nov 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Foxit
Foxit pdf Reader |
|
CPEs | cpe:2.3:a:foxit:pdf_reader:-:*:*:*:*:*:*:* | |
Vendors & Products |
Foxit
Foxit pdf Reader |
|
Metrics |
ssvc
|
Fri, 22 Nov 2024 21:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the configuration files used by the Foxit Reader Update Service. The issue results from incorrect permissions set on a resource used by the service. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of SYSTEM. Was ZDI-CAN-23966. | |
Title | Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability | |
Weaknesses | CWE-732 | |
References |
| |
Metrics |
cvssV3_0
|
MITRE
Status: PUBLISHED
Assigner: zdi
Published: 2024-11-22T21:17:32.646Z
Updated: 2024-11-26T15:57:53.504Z
Reserved: 2024-09-26T19:33:28.327Z
Link: CVE-2024-9245
Vulnrichment
Updated: 2024-11-25T18:40:27.196Z
NVD
Status : Analyzed
Published: 2024-11-22T22:15:20.503
Modified: 2024-11-29T18:21:03.150
Link: CVE-2024-9245
Redhat
No data.