The specific flaw exists within the FoxitCloudUpdateService service. An attacker can trigger a memory corruption condition by writing certain data to a shared memory region. An attacker can leverage this vulnerability to execute code under the context of SYSTEM.
Foxit has issued an update to correct this vulnerability. More details can be found at:
|AbdulAziz Hariri of HP Zero Day Initiative and Jasiel Spelman of HP Zero Day Initiative