Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.807561
Category:Privilege escalation
Title:Foxit PhantomPDF Local Privilege Escalation Vulnerability
Summary:Foxit PhantomPDF is prone to a privilege escalation vulnerability.
Description:Summary:
Foxit PhantomPDF is prone to a privilege escalation vulnerability.

Vulnerability Insight:
The flaw is due to an error in
FoxitCloudUpdateService service which can trigger a memory corruption condition
by writing certain data to a shared memory region.

Vulnerability Impact:
Successful exploitation will allow attackers
to execute code under the context of system.

Affected Software/OS:
Foxit PhantomPDF version 7.2.0.722
and earlier.

Solution:
Upgrade to Foxit PhantomPDF version
7.2.2 or later.

CVSS Score:
6.9

CVSS Vector:
AV:L/AC:M/Au:N/C:C/I:C/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2015-8843
http://www.zerodayinitiative.com/advisories/ZDI-15-640
CopyrightCopyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.