CVE-2020-9418 in PDFescape Desktop

Résumé

par MITRE

An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attacker to gain privileges and execute code via DLL hijacking.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Réserver: 26/02/2020
• Modérer: accepté
• Entrée: VDB-150965
• CPE: prêt
• CWE: CWE-426 (confirmé)
• CVSS: 7.8 (NVD)
• EPSS: 0.00431
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-9418
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-9418
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-9418/