[CVE-2020-37254] Wondershare PDFelement 5.2.9 contains a privilege escalation vulnerability due to an unquoted servic…

Descripción técnica

Wondershare PDFelement 5.2.9 contains a privilege escalation vulnerability due to an unquoted service path in the WsAppService Windows service. Local attackers can place a malicious executable in the service path and execute code with LocalSystem privileges upon service restart or system reboot.

Puntuación CVSS

Score: 7.8/10 — Severidad: HIGH — Estado NIST: Awaiting Analysis

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Debilidades (CWE)

CWE-428

Fuente oficial

Publicado en NIST NVD.