PT-2015-7822 · Foxit · Foxit Reader

Abdulaziz Hariri + 1 · Published 2015-12-15 · Updated 2016-04-19 · CVE-2015-8843

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Foxit Reader versions 6.1 through 6.2.x Foxit Reader versions 7.x before 7.2.2

Description The issue allows local users to gain privileges by writing crafted data to a shared memory region, which triggers memory corruption when an update to the Cloud plugin is available.

Recommendations For Foxit Reader versions 6.1 through 6.2.x, update to a version after 6.2.x. For Foxit Reader versions 7.x before 7.2.2, update to version 7.2.2 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2015-8843

ZDI-15-640

Affected Products

Foxit Reader

References · 5

• https://zerodayinitiative.com/advisories/ZDI-15-640 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-8843 · Security Note
• https://foxitsoftware.com/support/security-bulletins.php#FRD-35 · Vendor Advisory
• https://foxitsoftware.com/support/security-bulletins.php · Note
• http://zerodayinitiative.com/advisories/ZDI-15-640 · Note