CVE-2024-9244: Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability
Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the handling of the configuration files used by the Foxit Reader Update Service. The issue results from incorrect permissions set on a resource used by the service. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of SYSTEM. Was ZDI-CAN-23933.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-9244?
CVE-2024-9244 has been rated with a severity level that indicates it allows local privilege escalation.
How do I fix CVE-2024-9244?
To fix CVE-2024-9244, update Foxit PDF Reader or Foxit PDF Editor to the latest version available.
Who is affected by CVE-2024-9244?
CVE-2024-9244 affects installations of Foxit PDF Reader and certain versions of Foxit PDF Editor on Windows.
Can CVE-2024-9244 be exploited remotely?
No, CVE-2024-9244 requires local access to exploit, making it a local privilege escalation vulnerability.
What versions of Foxit products are vulnerable to CVE-2024-9244?
CVE-2024-9244 affects Foxit PDF Reader versions up to 2024.2.3.25184 and specific ranges of Foxit PDF Editor versions.