important · Privilege — Windows
Three Foxit updater trust failures let a low-privilege Windows user execute code as SYSTEM.
Affects
Foxit PDF Reader, a Windows desktop PDF viewer with a privileged updater.
The three paths are insecurely permissioned resources, DLL loading from a user-writable directory and a download-and-extraction substitution race.
Detail and 2 sources
Foxit identifies the affected updater paths and the fixed Reader release.