Vulnerability in Foxitsoftware Reader

CVE-2016-8856

Foxit Reader for Mac 2.1.0.0804 and earlier and Foxit Reader for Linux 2.1.0.0805 and earlier suffered from a vulnerability where weak file permissions could be exploited by attackers to execute arbitrary code. After the installation, Foxi…

EPSS: 0.000 (0.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

References

  • 93608 (Technical Description, VDB Entry, vdb-entry, x_refsource_BID)
  • cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
  • 1037101 (vdb-entry, x_refsource_SECTRACK)

Frequently asked questions

What is CVE-2016-8856?
CVE-2016-8856 is a high-severity vulnerability in Foxitsoftware Reader, classified under Permission Issues. CVSS score: 7.8/10. Published 2016-10-31.
How severe is CVE-2016-8856?
High severity. CVSS v3 base score is 7.8 out of 10.