Summaryinfo

A vulnerability categorized as problematic has been discovered in Real Software TinyPDF. This impacts an unknown function of the file InstallTinyPDF.exe of the component Installer. Such manipulation leads to privileges management (Temporary). The attack must be carried out locally. There is no available exploit. Applying the suggested workaround is recommended.

Detailsinfo

A vulnerability was found in Real Software TinyPDF (affected version unknown) and classified as problematic. Affected by this issue is an unknown functionality of the file InstallTinyPDF.exe of the component Installer. The manipulation with an unknown input leads to a privileges management vulnerability (Temporary). Using CWE to declare the problem leads to CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. Impacted is confidentiality, integrity, and availability.

The weakness was presented 01/02/2017 by Stefan Kanthak as Executable installers are vulnerable^WEVIL (case 45): ReadPDF's installers allow escalation of privilege as not defined mailinglist post (Full-Disclosure). The advisory is shared for download at seclists.org. The public release happened without coordination with the vendor. The attack needs to be approached locally. The successful exploitation needs a simple authentication. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1068.

The vulnerability was handled as a non-public zero-day exploit for at least 1684 days. During that time the estimated underground price was around $0-$5k.

The best possible mitigation is suggested to be Workaround. The mailinglist post contains the following remark:

Write a windows-conformant .INF to install the printer driver (see <http://home.arcor.de/skanthak/download/TINYPDF.INF>), then use MakeCAT.exe to create a .CAT and SignTool.exe to sign it.

See VDB-94927 for similar entry. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Vendor

• Real Software

Name

• TinyPDF

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion