CVE-2016-8856 in Readerinfo

Summary

Foxit Reader for Mac 2.1.0.0804 and earlier and Foxit Reader for Linux 2.1.0.0805 and earlier suffered from a vulnerability where weak file permissions could be exploited by attackers to execute arbitrary code. After the installation, Foxit Reader's core files were world-writable by default, allowing an attacker to overwrite them with backdoor code, which when executed by privileged user would result in Privilege Escalation, Code Execution, or both.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsible

Reservation

10/19/2016

Disclosure

10/31/2016

Entries

VDB-93200

CPE

ready

CVSS

7.8

EPSS

0.00007

Activities

Very Low

Sources

Might our Artificial Intelligence support you?

Check our Alexa App!