PT-2017-12753 · Foxit · Foxit Pdf Compressor

Publicado 2017-08-16 · Atualizado 2020-08-19 · CVE-2017-12892

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Foxit PDF Compressor versions 7.0.0.183 through 7.7.2.10

Description The issue concerns a DLL preloading vulnerability in the installers of Foxit PDF Compressor. This vulnerability allows the installer to load a malicious DLL if it is located in the current working directory of the installer.

Recommendations For Foxit PDF Compressor versions 7.0.0.183 through 7.7.2.10, update to a version that contains a fix for this issue to prevent the potential loading of malicious DLLs. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

CVE-2017-12892

Produtos afetados

Foxit Pdf Compressor

Referências · 3

• https://foxitsoftware.com/support/security-bulletins.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-12892 · Nota de Segurança
• http://securityfocus.com/bid/100414 · Nota