CVE-2022-43310

EUVD-2022-46350
An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL libraries without specifying an absolute path.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA-ADPADP
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 6%
Affected Products (NVD)
VendorProductVersion
foxitsoftwarefoxit_reader
𝑥
< 11.2.118.51569
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/hxxt9049/futing
https://www.foxitsoftware.cn/support/security-bulletins.html
https://www.foxitsoftware.com/support/security-bulletins.php
https://github.com/hxxt9049/futing
https://www.foxitsoftware.cn/support/security-bulletins.html
https://www.foxitsoftware.com/support/security-bulletins.php