CVE-2012-4759

Untrusted search path vulnerability in facebook_plugin.fpi in the Facebook plug-in in Foxit Reader 5.3.1.0606 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .pdf file. NOTE: some of these details are obtained from third party information.

CVSS v2.0

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.86% chance of exploitation in the next 30 days, 56th percentile

Published

2012-09-06

Updated

2024-09-17

Proof-of-concept exploits (1)

• http://archives.neohapsis.com/archives/fulldisclosure/2012-08/0293.html

References

• CVE Record
• NVD entry

Related

• CVE-2012-4751
• CVE-2012-4760
• CVE-2012-4750
• CVE-2012-4761
• CVE-2012-4746
• CVE-2012-4767