CVE-2016-8856 Misconfiguration in n/a
Weak file permissions in Foxit Reader allow attackers to overwrite core files, leading to arbitrary code execution and privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-8856?
CVE-2016-8856 is a high-severity vulnerability in Foxitsoftware Reader, published on 31 Oct 2016. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Foxit Reader for Mac 2.1.0.0804 and earlier and Foxit Reader for Linux 2.1.0.0805 and earlier suffered from a vulnerability where weak file permissions could be exploited by attackers to execute arbitrary code. After the installation, Foxit Reader's core files were world-writable by default, allowing an attacker to overwrite them with backdoor code, which when executed by privileged user would result in Privilege Escalation, Code Execution, or both.
Weakness: CWE-275
Which versions are affected by CVE-2016-8856?
It affects 1 product.
Products include Foxitsoftware Reader.
How do I fix CVE-2016-8856?
No fix has been published for CVE-2016-8856 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-8856 being exploited?
There is no known exploitation of CVE-2016-8856 in the wild and no public exploit code.
Other vulnerabilities in Foxitsoftware Reader
Sources
Also known as GHSA-rjw9-v59v-932x.