Overview
- Description
- Foxit PDF Reader (12.1.1.15289 and earlier) and Foxit PDF Editor (12.1.1.15289 and all previous 12.x versions, 11.2.5.53785 and all previous 11.x versions, and 10.1.11.37866 and earlier) on Windows allows Local Privilege Escalation when installed to a non-default directory because unprivileged users have access to an executable file of a system service. This is fixed in 12.1.2.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 7.8
- Impact score
- 5.9
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
Weaknesses
- nvd@nist.gov
- NVD-CWE-noinfo
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F03F0F0-B6CA-45EB-BD19-C3573DAD4C3D",
"versionEndIncluding": "10.1.11.37866"
},
{
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B76ABE6-A4AD-4204-94BE-0F54413EF686",
"versionEndIncluding": "11.2.5.53785",
"versionStartIncluding": "11.0.0"
},
{
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "53A0D641-42E8-419F-8331-30E361956C72",
"versionEndIncluding": "12.1.1.15289",
"versionStartIncluding": "12.0.0"
},
{
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "855A569D-D3C2-4205-AF0A-87E825A10FB2",
"versionEndIncluding": "12.1.1.15289"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]