The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local users to gain privileges by writing crafted data to a shared memory region, which triggers memory corruption.
References
Link | Resource |
---|---|
http://www.zerodayinitiative.com/advisories/ZDI-15-640 | |
https://www.foxitsoftware.com/support/security-bulletins.php#FRD-35 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2016-04-13 08:59
Updated : 2016-04-18 20:51
NVD link : CVE-2015-8843
Mitre link : CVE-2015-8843
JSON object : View
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
Products Affected
foxitsoftware
- foxit_reader