NVD

Id
24785  
Name
CVE-2015-2789  
Description
Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-03-30  
Modified Date
2016-12-02  
Seq
2015-2789  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
130809 24785 CVE-2015-2789 http://packetstormsecurity.com/files/130840/Foxit-Reader-7.0.6.1126-Privilege-Escalation.html  View
130810 24785 CVE-2015-2789 36390  View
130811 24785 CVE-2015-2789 http://www.foxitsoftware.com/support/security_bulletins.php#FRD-25  View
130812 24785 CVE-2015-2789 73432  View
130813 24785 CVE-2015-2789 1031879  View
130814 24785 CVE-2015-2789 http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5235.php  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6695 JVNDB-2015-002015 Foxit Reader の Cloud プラグインの Foxit Cloud Safe Update Service における権限を取得される脆弱性 Foxit Reader の Cloud プラグインの Foxit Cloud Safe Update Service には、引用符で囲まれていない Windows 検索パスにより、権限を取得される脆弱性が存在します。 CVE-2015-2789 80014 CVE-2015-2789 24785 4.4 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002015.html 2015-03-09 2015-04-02 View