A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the updater executable before executing it. A low privilege user can trigger the update action which can result in unexpected elevation of privilege.

According to its version, the Foxit PDF Editor application (previously named Foxit PhantomPDF) installed on the remote Windows host is prior to 12.1.7. It is, therefore affected by vulnerability:

  - A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs     due to improper certification validation of the updater executable before executing it. A low privilege     user can trigger the update action which can result in unexpected elevation of privilege. (CVE-2024-29072)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its version, the Foxit PDF Editor application (previously named Foxit PhantomPDF) installed on the remote Windows host is prior to 11.2.10. It is, therefore affected by vulnerability:

  - A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs     due to improper certification validation of the updater executable before executing it. A low privilege     user can trigger the update action which can result in unexpected elevation of privilege. (CVE-2024-29072)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its version, the Foxit PDF Editor application (previously named Foxit PhantomPDF) installed on the remote Windows host is prior to 13.1.2. It is, therefore affected by vulnerability:

  - A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs     due to improper certification validation of the updater executable before executing it. A low privilege     user can trigger the update action which can result in unexpected elevation of privilege. (CVE-2024-29072)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its version, the Foxit PDF Reader application (previously named Foxit Reader) installed on the remote Windows host is prior to 2024.2.2. It is, therefore affected by vulnerability:

  - A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs     due to improper certification validation of the updater executable before executing it. A low privilege     user can trigger the update action which can result in unexpected elevation of privilege. (CVE-2024-29072)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its version, the Foxit PDF Editor application (previously named Foxit PhantomPDF) installed on the remote Windows host is prior to 2024.2.2. It is, therefore affected by vulnerability:

  - A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs     due to improper certification validation of the updater executable before executing it. A low privilege     user can trigger the update action which can result in unexpected elevation of privilege. (CVE-2024-29072)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
197930	Foxit PDF Editor < 12.1.7 Vulnerability	Nessus	Windows	high
197929	Foxit PDF Editor < 11.2.10 Vulnerability	Nessus	Windows	high
197923	Foxit PDF Editor < 13.1.2 Vulnerability	Nessus	Windows	high
197886	Foxit PDF Reader < 2024.2.2 Vulnerability	Nessus	Windows	high
197885	Foxit PDF Editor < 2024.2.2 Vulnerability	Nessus	Windows	high

Detections

Analytics

CVE-2024-29072

high

Tenable Plugins

high

high

high

high

high