Executive Summary

This vulnerability occurs because the application's installer runs with elevated privileges but uses untrusted search paths to locate system executables and DLLs. These search paths can include directories writable by local users, allowing an attacker to place malicious binaries with the same names as legitimate system files. When the installer loads or executes these malicious binaries instead of the legitimate ones, it results in local privilege escalation.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can allow a local attacker to escalate their privileges on the affected system. By placing malicious binaries in user-writable directories that are searched by the installer, the attacker can have these binaries executed with elevated privileges. This can lead to unauthorized access, control over the system, and potentially full system compromise.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, users should update their Foxit PDF Reader and Editor applications to the latest versions.

Updates can be obtained through the application's built-in update feature or by downloading the latest versions from the Foxit website.

Useful 0 Not Useful 0