Privilege Escalation Vulnerability in Foxit Reader
CVE-2024-29072
8.2HIGH
Summary
A privilege escalation vulnerability exists in Foxit Reader due to improper validation of the updater executable's certification. This security flaw allows a low privilege user to initiate the update process, potentially leading to unauthorized elevation of privileges. It's crucial for users of Foxit Reader 2024.2.0.25138 and earlier versions to be aware of this issue and consider updating their software to mitigate the risks associated with this vulnerability.
Affected Version(s)
Foxit Reader 2024.2.0.25138
References
CVSS V3.1
Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved
Collectors
NVD DatabaseMitre Database
Credit
Discovered by KPC of Cisco Talos.