CVE-2016-8856

Foxit Reader for Mac 2.1.0.0804 and earlier and Foxit Reader for Linux 2.1.0.0805 and earlier suffered from a vulnerability where weak file permissions could…

published October 31, 2016

CVSS
—
EPSS
1%
Percentile
56.7
In the wild
Unconfirmed
What it is

Foxit Reader for Mac 2.1.0.0804 and earlier and Foxit Reader for Linux 2.1.0.0805 and earlier suffered from a vulnerability where weak file permissions could be exploited by attackers to execute arbitrary code. After the installation, Foxit Reader's core files were world-writable by default, allowing an attacker to overwrite them with backdoor code, which when executed by privileged user would result in Privilege Escalation, Code Execution, or both.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00823 · 56.7th percentile
Published
2016-10-31T10:00Z
EPSS history
Timeline
  • 31 OCT 10:00Z
    Foxit Reader for Mac 2.1.0.0804 and earlier and Foxit Reader for Linux 2.1.0.0805 and earlier suffered from a vulnerability where weak file permissions could…
    cvelistv5