CVE-2022-24955 : Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncont

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for DLL files.

Published 2022-02-11 02:15:07

Updated 2022-02-17 03:22:59

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2022-24955

Foxit » Pdf Reader
Versions up to, including, (<=) 11.1.0.52543
cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Foxit » Pdf Editor
Versions up to, including, (<=) 10.1.6.37749
cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Foxit » Pdf Editor
Versions from including (>=) 11.0.1.0719 and up to, including, (<=) 11.2.0.53415
cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A

EPSS FAQ

0.22%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 61 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE-427 Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

Assigned by: nvd@nist.gov (Primary)

Jump to