CVE-2019-8014

CVE-2019-8014: un análisis simple. Contiene PoC y exploit. El shellcode es para abrir la calculadora o una ventana de CMD, no lo recuerdo. Nota: my.7z es la imagen bmp necesaria para desencadenar la vulnerabilidad. El archivo es demasiado grande, así que lo comprimí...

CVE-2023-49147

An issue was discovered in PDF24 Creator 11.14.0. The configuration of the msi installer file was found to produce a visible cmd.exe window when using the repair function of msiexec.exe. This allows an unprivileged local attacker to use a chain of actions e.g., an oplock on faxPrnInst.log to open...

PT-2023-31066 · Pdf24 · Pdf24 Creator

Name of the Vulnerable Software and Affected Versions: PDF24 Creator version 11.14.0 Description: An issue was discovered in the configuration of the msi installer file of PDF24 Creator, which produces a visible cmd.exe window when using the repair function of msiexec.exe. This allows an...