Foxit FoxitCloudUpdateService Local Privilege Escalation Vulnerability

Foxit FoxitCloudUpdateService Local Privilege Escalation Vulnerability
Foxit FoxitCloudUpdateService Local Privilege Escalation Vulnerability

Release date:
Updated on:

Affected Systems:

Foxit Reader

Description:

Foxit Reader is a small PDF document viewer and print program.

FoxitCloudUpdateService of Foxit Reader has a security vulnerability. Remote attackers can write some data in the shared memory area to trigger memory corruption and execute arbitrary code in the System context.

<* Source: AbdulAziz harsiri

Link: http://www.zerodayinitiative.com/advisories/ZDI-15-640/
*>

Suggestion:

Vendor patch:

Foxit
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://www.foxitsoftware.com/support/security-bulletins.php

This article permanently updates the link address: