CVE-2020-36957

Summary

PDF Complete 3.5.310.2002 contains an unquoted service path vulnerability in its pdfsvc.exe service configuration. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges.

Affected Software

Weaknesses

• CWE-428: Unquoted Search Path or Element

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

References

• https://www.exploit-db.com/exploits/49226
• https://pdf-complete.informer.com/3.5/
• https://www.vulncheck.com/advisories/pdf-complete-pdfsvcexe-unquoted-service-path

• ←Previous
• Next→