High severity7.8NVD Advisory· Published Oct 31, 2016· Updated Jun 17, 2026
CVE-2016-8856
CVE-2016-8856
Description
Foxit Reader for Mac 2.1.0.0804 and earlier and Foxit Reader for Linux 2.1.0.0805 and earlier suffered from a vulnerability where weak file permissions could be exploited by attackers to execute arbitrary code. After the installation, Foxit Reader's core files were world-writable by default, allowing an attacker to overwrite them with backdoor code, which when executed by privileged user would result in Privilege Escalation, Code Execution, or both.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:foxitsoftware:reader:*:*:*:*:*:linux_kernel:*:*+ 2 more
- cpe:2.3:a:foxitsoftware:reader:*:*:*:*:*:linux_kernel:*:*range: <=2.1.0.0805
- cpe:2.3:a:foxitsoftware:reader:*:*:*:*:*:mac_os_x:*:*range: <=2.1.0.0804
- (no CPE)range: <=2.1.0.0805
- Range: <=2.1.0.0804
Patches
Vulnerability mechanics
References
3- www.foxitsoftware.com/support/security-bulletins.phpnvdPatchVendor Advisory
- www.securityfocus.com/bid/93608nvdTechnical DescriptionVDB Entry
- www.securitytracker.com/id/1037101nvd
News mentions
0No linked articles in our index yet.