Vulnerabilities > CVE-2015-2789 - Unspecified vulnerability in Foxitsoftware Foxit Reader

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
foxitsoftware
exploit available

Summary

Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder.

Exploit-Db

descriptionFoxit Reader 7.0.6.1126 - Unquoted Service Path Elevation Of Privilege. CVE-2015-2789. Local exploit for windows platform
fileexploits/windows/local/36390.txt
idEDB-ID:36390
last seen2016-02-04
modified2015-03-16
platformwindows
port
published2015-03-16
reporterLiquidWorm
sourcehttps://www.exploit-db.com/download/36390/
titleFoxit Reader 7.0.6.1126 - Unquoted Service Path Elevation Of Privilege
typelocal