Lucene search

MitreCVE-2023-27769

HistoryApr 04, 2023 - 3:15 p.m.

CVE-2023-27769

2023-04-0415:15:09

CWE-426

mitre

web.nvd.nist.gov

cve-2023-27769

remote code execution

wondershare pdf reader

security vulnerability

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

40.6%

JSON

An issue found in Wondershare Technology Co.,Ltd PDF Reader v.1.0.1 allows a remote attacker to execute arbitrary commands via the pdfreader_setup_full13143.exe file.

Affected configurations

Nvd

Node

wondersharepdf_readerMatch1.0.1

VendorProductVersionCPE
wondersharepdf_reader1.0.1cpe:2.3:a:wondershare:pdf_reader:1.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wondershare	pdf_reader	1.0.1	cpe:2.3:a:wondershare:pdf_reader:1.0.1:::::::*

References

github.com/liong007/Wondershare/issues/11

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

40.6%

JSON

Related for CVE-2023-27769