Lucene search
PRIOn knowledge basePRION:CVE-2023-49147HistoryDec 19, 2023 - 11:15 p.m.
Code injection
2023-12-1923:15:00
PRIOn knowledge base
www.prio-n.com
10
pdf24 creator
code injection
vulnerability
msi installer
cmd.exe
repair function
local attacker
chain of actions
system cmd.exe
nvd
An issue was discovered in PDF24 Creator 11.14.0. The configuration of the msi installer file was found to produce a visible cmd.exe window when using the repair function of msiexec.exe. This allows an unprivileged local attacker to use a chain of actions (e.g., an oplock on faxPrnInst.log) to open a SYSTEM cmd.exe.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pdf24_creator | lt | 11.15.2 |
Related
cve
cve
CVE-2023-49147
2023-12-19 23:15:07
cvelist
cvelist
CVE-2023-49147
2023-12-19 00:00:00
nvd
nvd
CVE-2023-49147
2023-12-19 23:15:07
packetstorm
packetstorm
PDF24 Creator 11.15.1 Local Privilege Escalation
2023-12-13 00:00:00