Lucene search

[email protected]CVE-2023-33240

HistoryMay 19, 2023 - 6:15 a.m.

CVE-2023-33240

2023-05-1906:15:08

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2023-33240

foxit pdf reader

foxit pdf editor

local privilege escalation

windows

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

Foxit PDF Reader (12.1.1.15289 and earlier) and Foxit PDF Editor (12.1.1.15289 and all previous 12.x versions, 11.2.5.53785 and all previous 11.x versions, and 10.1.11.37866 and earlier) on Windows allows Local Privilege Escalation when installed to a non-default directory because unprivileged users have access to an executable file of a system service. This is fixed in 12.1.2.

CPENameOperatorVersion
foxit:pdf_editorfoxit pdf editorle10.1.11.37866
foxit:pdf_editorfoxit pdf editoreq10.1.7
foxit:pdf_editorfoxit pdf editoreq10.1.11
foxit:pdf_editorfoxit pdf editoreq10.1.10
foxit:pdf_editorfoxit pdf editoreq10.1.8.37795
foxit:pdf_editorfoxit pdf editoreq10.1.6.37749
foxit:pdf_editorfoxit pdf editoreq10.1.9
foxit:pdf_editorfoxit pdf editoreq-
foxit:pdf_editorfoxit pdf editorle11.2.5.53785
foxit:pdf_editorfoxit pdf editoreq11.2.1

CPE	Name	Operator	Version
foxit:pdf_editor	foxit pdf editor	le	10.1.11.37866
foxit:pdf_editor	foxit pdf editor	eq	10.1.7
foxit:pdf_editor	foxit pdf editor	eq	10.1.11
foxit:pdf_editor	foxit pdf editor	eq	10.1.10
foxit:pdf_editor	foxit pdf editor	eq	10.1.8.37795
foxit:pdf_editor	foxit pdf editor	eq	10.1.6.37749
foxit:pdf_editor	foxit pdf editor	eq	10.1.9
foxit:pdf_editor	foxit pdf editor	eq	-
foxit:pdf_editor	foxit pdf editor	le	11.2.5.53785
foxit:pdf_editor	foxit pdf editor	eq	11.2.1

Rows per page:

1-10 of 481

References

www.foxit.com/support/security-bulletins.html

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2023-33240

prion1 cvelist1