CVE-2015-2789

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder.

Metrics

CVSS 2.0 4.4/10AV:L/AC:M/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/130840/Foxit-Reader-7.0.6.1126-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
http://www.exploit-db.com/exploits/36390Exploit, Third Party Advisory, VDB Entry
http://www.foxitsoftware.com/support/security_bulletins.php#FRD-25Patch, Vendor Advisory
http://www.securityfocus.com/bid/73432
http://www.securitytracker.com/id/1031879Third Party Advisory, VDB Entry
http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5235.phpThird Party Advisory
http://packetstormsecurity.com/files/130840/Foxit-Reader-7.0.6.1126-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
http://www.exploit-db.com/exploits/36390Exploit, Third Party Advisory, VDB Entry
http://www.foxitsoftware.com/support/security_bulletins.php#FRD-25Patch, Vendor Advisory
http://www.securityfocus.com/bid/73432
http://www.securitytracker.com/id/1031879Third Party Advisory, VDB Entry
http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5235.phpThird Party Advisory

Timeline

Published: Mar 30, 2015
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-27904.3Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash)CVE-2015-27916.4The "menu sync" function in the WPML plugin before 3.1.9 for WordPress allows remote attackers to delete arbitrary posts, pages, and menus v CVE-2015-27927.5The WPML plugin before 3.1.9 for WordPress does not properly handle multiple actions in a request, which allows remote attackers to bypass n CVE-2015-27936.1Cross-site scripting (XSS) vulnerability in templates/openid-selector.tmpl in ikiwiki before 3.20150329 allows remote attackers to inject ar CVE-2015-27949.8The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via CVE-2015-27966.1Multiple cross-site scripting (XSS) vulnerabilities in Project-Pier ProjectPier-Core allow remote attackers to inject arbitrary web script o CVE-2015-279710.0Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with fi CVE-2015-27989.8SQL injection vulnerability in Joomla! Component Contact Form Maker 1.0.1 allows remote attackers to execute arbitrary SQL commands via the CVE-2015-28007.5The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH012 and S7700, S9300 CVE-2015-28027.5An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Manager 9.30 through 9.CVE-2015-28036.0SQL injection vulnerability in mod1/index.php in the Akronymmanager (sb_akronymmanager) extension before 7.0.0 for TYPO3 allows remote authe CVE-2015-28044.3The management web interface in Alcatel-Lucent OmniSwitch 6450, 6250, 6850E, 9000E, 6400, and 6855 with firmware before 6.6.4.309.R01 and 6.