Privilege Escalation Vulnerability in Foxit Reader
CVE-2024-29072

8.2HIGH

Key Information:

Vendor
Foxit
Status
Foxit Reader
Vendor
CVE Published:
28 May 2024

Summary

A privilege escalation vulnerability exists in Foxit Reader due to improper validation of the updater executable's certification. This security flaw allows a low privilege user to initiate the update process, potentially leading to unauthorized elevation of privileges. It's crucial for users of Foxit Reader 2024.2.0.25138 and earlier versions to be aware of this issue and consider updating their software to mitigate the risks associated with this vulnerability.

Affected Version(s)

Foxit Reader 2024.2.0.25138

References

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database

Credit

Discovered by KPC of Cisco Talos.
.