2 matches found
CVE-2018-16156: Untrusted Search Path
In PaperStream IP TWAIN 1.42.0.5685 Service Update 7, the FJTWSVIC service running with SYSTEM privilege processes unauthenticated messages received over the FjtwMkicFjicube32 named pipe. One of these message processing functions attempts to dynamically load the UninOldIS.dll library and executes...
7.8CVSS5.9AI score0.02557EPSS
SaveExploits4References6
PT-2019-9228
Name of the Vulnerable Software and Affected Versions PaperStream IP TWAIN version 1.42.0.5685 Service Update 7 Description The issue concerns the FJTWSVIC service, which runs with SYSTEM privilege and processes unauthenticated messages over a named pipe called FjtwMkic Fjicube 32. A function in...
7.8CVSS0.02557EPSS
SaveExploits4References6
20