CVE-2024-12753

MEDIUM Year: 2024
CVSS v3 Score
6.7
Medium
Weakness Type
CWE-59
View all →

Vulnerability Description

Foxit PDF Reader Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the product installer. By creating a junction, an attacker can abuse the installer process to create an arbitrary file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-25408.

Related Vulnerabilities

CVE-2009-1142

MEDIUM
CVSS:6.7(Medium)

An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can gain privileges via a symlink attack on /tmp files if vmware-user-suid-wrapper is setuid root and the ChmodChownDirectory fu...

CWE-592009

CVE-2017-12172

MEDIUM
CVSS:6.7(Medium)

PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database sup...

CWE-592017

CVE-2017-15097

MEDIUM
CVSS:6.7(Medium)

Privilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL. An attacker with access to the postgres user account could use these flaws to obtain root access on the serve...

CWE-592017

CVE-2017-9525

MEDIUM
CVSS:6.7(Medium)

In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer script allows for group-crontab-to-root privilege escalation via symlink attacks agai...

CWE-592017

CVE-2020-10665

MEDIUM
CVSS:6.7(Medium)

Docker Desktop allows local privilege escalation to NT AUTHORITY\SYSTEM because it mishandles the collection of diagnostics with Administrator privileges, leading to arbitrary DACL permissions overwri...

CWE-592020

CVE-2021-35938

MEDIUM
CVSS:6.7(Medium)

A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original ...

CWE-592021