Unscored severity · published Mar 30, 2015
CVE-2015-2789
Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges…
–
CVSS
3.2%
EPSS
No
On KEV
Description
Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.2% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
Foxit Reader · Foxitsoftware
6.1; 6.1.2; 6.1.4; 6.2; 6.2.1; 7.0; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-2789
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-2789
Exploit
http://packetstormsecurity.com/files/130840/Foxit-Reader-7.0.6.1126-Privilege-Escalation.html
Exploit
http://www.exploit-db.com/exploits/36390
Patch
http://www.foxitsoftware.com/support/security_bulletins.php#FRD-25
www.securityfocus.com
http://www.securityfocus.com/bid/73432
Third Party Advisory
http://www.securitytracker.com/id/1031879
Third Party Advisory
http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5235.php
More from Foxit Reader
9.8
CVE-2021-38574
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4
9.8
CVE-2021-38573
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4
9.8
CVE-2021-38572
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4
9.8
CVE-2021-38568
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4
9.8
CVE-2021-33793
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document conversion