Lucene search

K
zdiAbdulAziz Hariri of HP Zero Day Initiative and Jasiel Spelman of HP Zero Day InitiativeZDI-15-640
HistoryDec 15, 2015 - 12:00 a.m.

Foxit FoxitCloudUpdateService Local Privilege Escalation Vulnerability

2015-12-1500:00:00
AbdulAziz Hariri of HP Zero Day Initiative and Jasiel Spelman of HP Zero Day Initiative
www.zerodayinitiative.com
49

EPSS

0.002

Percentile

56.7%

This vulnerability allows local attackers to elevate privileges on vulnerable installations of Foxit Reader. Authentication is not required to exploit this vulnerability. The specific flaw exists within the FoxitCloudUpdateService service. An attacker can trigger a memory corruption condition by writing certain data to a shared memory region. An attacker can leverage this vulnerability to execute code under the context of SYSTEM.

EPSS

0.002

Percentile

56.7%

Related for ZDI-15-640