CVE-2020-18171

2021-07-2618:26:19

mitre

www.cve.org

techsmith snagit

ole

privilege escalation

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

17.8%

JSON

TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding (OLE) which can allow attackers to obfuscate and embed crafted files used to escalate privileges. NOTE: This implies that Snagit’s use of OLE is a security vulnerability unto itself and it is not. See reference document for more details