KLA10517 Privilege escalation in Foxit Reader

Search path vulnerability was found in Foxit Reader Cloud plugin. By exploiting this vulnerability malicious users gain privileges. This vulnerability can be exploited locally via files manipulation.

Original advisories

Foxit bulletins

Exploitation

Public exploits exist for this vulnerability.

Related products

Foxit-Reader

CVE list

CVE-2015-2789 warning

Solution

Update to the latest version

Get Foxit software

Impacts

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

• Foxit Reader versions from 6.1 to 7.0.6.1126