CVE-2022-43310 - An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL libraries without specifying an absolute path

Back Back to CVE browser

HIGH

An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL libraries without specifying an absolute path

Published Nov 9, 2022

7.8

HIGH

CVSS 3.1

EPSS 1.60%

Description

An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL libraries without specifying an absolute path.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-427

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-46350
Advisory
https://github.com/hxxt9049/futing
Third Party Advisory
https://www.foxitsoftware.cn/support/security-bulletins.html
Vendor Advisory
https://www.foxitsoftware.com/support/security-bulletins.php
Not ApplicableVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-46350		Advisory
https://github.com/hxxt9049/futing		Third Party Advisory
https://www.foxitsoftware.cn/support/security-bulletins.html		Vendor Advisory
https://www.foxitsoftware.com/support/security-bulletins.php		Not ApplicableVendor Advisory