PT-2015-7822 · Foxit · Foxit Reader

Abdulaziz Hariri + 1 · Publicado 2015-12-15 · Atualizado 2016-04-19 · CVE-2015-8843

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Foxit Reader versions 6.1 through 6.2.x Foxit Reader versions 7.x before 7.2.2

Description The issue allows local users to gain privileges by writing crafted data to a shared memory region, which triggers memory corruption when an update to the Cloud plugin is available.

Recommendations For Foxit Reader versions 6.1 through 6.2.x, update to a version after 6.2.x. For Foxit Reader versions 7.x before 7.2.2, update to version 7.2.2 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2015-8843

ZDI-15-640

Produtos afetados

Foxit Reader

Referências · 5

• https://foxitsoftware.com/support/security-bulletins.php · Nota
• https://zerodayinitiative.com/advisories/ZDI-15-640 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-8843 · Nota de Segurança
• https://foxitsoftware.com/support/security-bulletins.php#FRD-35 · Aviso do Fabricante
• http://zerodayinitiative.com/advisories/ZDI-15-640 · Nota