Detections
Analytics

CVE-2015-2789

high

Description

Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder.

References

http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5235.php

http://www.securitytracker.com/id/1031879

http://www.securityfocus.com/bid/73432

http://www.foxitsoftware.com/support/security_bulletins.php#FRD-25

Details

Source: Mitre, NVD

Published: 2015-03-30

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 4.4

Vector: CVSS2#AV:L/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00193