CVE-2020-7883

2021-11-1600:00:00

CWE-494

krcert

www.cve.org

9.6 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.2%

JSON

Printchaser v2.2021.804.1 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. This can be leveraged for code execution.

CNA Affected

[
  {
    "platforms": [
      "Windows"
    ],
    "product": "Printchaser",
    "vendor": "WOWSOFT",
    "versions": [
      {
        "lessThan": "2.2021.1103.101",
        "status": "affected",
        "version": "2.2021.804.1",
        "versionType": "custom"
      }
    ]
  }
]

References

www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36350