CVE-2016-8856: High severity foxit reader mac vulnerability
Foxit Reader for Mac 2.1.0.0804 and earlier and Foxit Reader for Linux 2.1.0.0805 and earlier suffered from a vulnerability where weak file permissions could be exploited by attackers to execute arbitrary code. After the installation, Foxit Reader's core files were world-writable by default, allowing an attacker to overwrite them with backdoor code, which when executed by privileged user would result in Privilege Escalation, Code Execution, or both.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8856?
CVE-2016-8856 is considered a critical vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2016-8856?
To fix CVE-2016-8856, update Foxit Reader to version 2.1.0.0805 or later for Linux and 2.1.0.0805 or later for Mac.
What systems are affected by CVE-2016-8856?
CVE-2016-8856 affects Foxit Reader for Mac versions up to 2.1.0.0804 and Foxit Reader for Linux versions up to 2.1.0.0805.
What type of vulnerability is CVE-2016-8856?
CVE-2016-8856 is a file permission vulnerability that allows attackers to exploit weak permissions to execute arbitrary code.
Is there a known exploit for CVE-2016-8856?
Yes, CVE-2016-8856 has the potential to be exploited by attackers due to the weak file permissions set during installation.