4.6
CVSSv2

CVE-2016-8856

Published: 31/10/2016 Updated: 29/07/2017
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 409
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Foxit Reader for Mac 2.1.0.0804 and previous versions and Foxit Reader for Linux 2.1.0.0805 and previous versions suffered from a vulnerability where weak file permissions could be exploited by malicious users to execute arbitrary code. After the installation, Foxit Reader's core files were world-writable by default, allowing an malicious user to overwrite them with backdoor code, which when executed by privileged user would result in Privilege Escalation, Code Execution, or both.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

foxitsoftware reader