CVE-2015-2789

Foxit Reader <7.0.6.1126 - Privilege Escalation

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2015-2789. PoCs published by LiquidWorm.

AI-analyzed exploit summary This is a writeup describing an unquoted service path vulnerability in Foxit Reader's 'FoxitCloudUpdateService', which could allow local privilege escalation if an attacker can place an executable in the system root path.

Description

Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder.

Exploits (1)

exploitdb WRITEUP
by LiquidWorm · textlocalwindows
https://www.exploit-db.com/exploits/36390

This is a writeup describing an unquoted service path vulnerability in Foxit Reader's 'FoxitCloudUpdateService', which could allow local privilege escalation if an attacker can place an executable in the system root path.

Classification
Writeup 100%
Attack Type
Lpe
Complexity
Moderate
Reliability
Theoretical
Target: Foxit Reader 7.0.6.1126 and 6.1
Auth required
Prerequisites: Local access to the system · Ability to write to the system root path
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/73432
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1031879
Patch, Vendor Advisory x_refsource_confirm
http://www.foxitsoftware.com/support/security_bulletins.php#FRD-25
Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/36390

Scores

EPSS 0.0319
EPSS Percentile 86.4%

Details

Status published
Products (7)
foxitsoftware/foxit_reader 6.1
foxitsoftware/foxit_reader 6.1.2
foxitsoftware/foxit_reader 6.1.4
foxitsoftware/foxit_reader 6.2
foxitsoftware/foxit_reader 6.2.1
foxitsoftware/foxit_reader 7.0
foxitsoftware/foxit_reader 7.0.6
Published Mar 30, 2015
Tracked Since Feb 18, 2026