TechSmith SnagIT 安全漏洞

Techsmith TechSmith SnagIT is a set of screen capture software from Techsmith USA. The software is mainly used to take screenshots and record videos on the screen. A security vulnerability exists in TechSmith Snagit, which stems from a vulnerability in the Windows installer XML WiX toolset in...

PT-2021-10146

Name of the Vulnerable Software and Affected Versions: TechSmith Snagit version 19.1.1.2860 Description: A vulnerability in the Windows installer XML WiX toolset of TechSmith Snagit allows attackers to escalate privileges. The exploitation of the Snagit installer would require the end user to...

TechSmith SnagIT Code Issue Vulnerability

TechSmith SnagIT is a set of screen capture software from TechSmith USA. The software is mainly used for taking screenshots on the screen, recording videos, etc. A code issue vulnerability exists in TechSmith SnagIt versions 11.2.1 through 20.0.3. A local attacker could exploit the vulnerability ...

CVE-2020-11541

In TechSmith SnagIt 11.2.1 through 20.0.3, an XML External Entity XXE injection issue exists that would allow a local attacker to exfiltrate data under the local Administrator account...

CVE-2020-11541

In TechSmith SnagIt 11.2.1 through 20.0.3, an XML External Entity XXE injection issue exists that would allow a local attacker to exfiltrate data under the local Administrator account...

Xxe

In TechSmith SnagIt 11.2.1 through 20.0.3, an XML External Entity XXE injection issue exists that would allow a local attacker to exfiltrate data under the local Administrator account...

CVE-2020-11541

TechSmith SnagIt 11.2.1–20.0.3 contains an XML External Entity (XXE) injection vulnerability. The issue may allow a local attacker to exfiltrate data with the local Administrator account. Affected component/behavior: XML processing leading to unauthenticated read of local data. The connected docu...

CVE-2020-11541

In TechSmith SnagIt 11.2.1 through 20.0.3, an XML External Entity XXE injection issue exists that would allow a local attacker to exfiltrate data under the local Administrator account...

CVE-2019-13382

UploaderService in SnagIT 2019.1.2 allows elevation of privilege by placing an invalid presentation file in %PROGRAMDATA%\TechSmith\TechSmith Recorder\QueuedPresentations and then creating a symbolic link in %PROGRAMDATA%\Techsmith\TechSmith Recorder\InvalidPresentations that points to an arbitra...

CVE-2019-13382

UploaderService in SnagIT 2019.1.2 allows elevation of privilege by placing an invalid presentation file in %PROGRAMDATA%\TechSmith\TechSmith Recorder\QueuedPresentations and then creating a symbolic link in %PROGRAMDATA%\Techsmith\TechSmith Recorder\InvalidPresentations that points to an arbitra...

Privilege escalation

UploaderService in SnagIT 2019.1.2 allows elevation of privilege by placing an invalid presentation file in %PROGRAMDATA%\TechSmith\TechSmith Recorder\QueuedPresentations and then creating a symbolic link in %PROGRAMDATA%\Techsmith\TechSmith Recorder\InvalidPresentations that points to an arbitra...

CVE-2019-13382

The CVE describes a local privilege escalation in SnagIT. UploaderService in SnagIT 2019.1.2 allows an attacker to elevate privileges by placing an invalid presentation file in %PROGRAMDATA%\TechSmith\TechSmith Recorder\QueuedPresentations and then creating a symbolic link in %PROGRAMDATA%\Techsm...

CVE-2019-13382

UploaderService in SnagIT 2019.1.2 allows elevation of privilege by placing an invalid presentation file in %PROGRAMDATA%\TechSmith\TechSmith Recorder\QueuedPresentations and then creating a symbolic link in %PROGRAMDATA%\Techsmith\TechSmith Recorder\InvalidPresentations that points to an arbitra...

TechSmith Snagit 10 (Build 788) DLL Hijacking Exploit (dwmapi.dll)

No description provided by source. / TechSmith Snagit 10 Build 788 Dll Hijacking Exploit By: Encrypt3d.M!nd Date: 25\8\2010 Download: http://www.techsmith.com/download/snagittrial.asp Details: Compile the following code and rename it to dwmapi.dl and place file with one of the affected types in t...

Snagit Installed

Binary data snagitinstalled.nbin...

Snagit DLL Preloading Arbitrary Code Execution

The version of Snagit installed on the remote Windows host has a DLL preloading vulnerability. An attacker can execute arbitrary code by tricking a user into opening a Snagit file .snag, .snagprof, or .snagcc from an attacker-controlled location such as a network share. C Tenable Network Security...

Snagit 11.0.1 DLL Hijack

Exploit Title: Snagit 11.0.1 dwmapi.dll DLL Hijacking Exploit Date: 2012-08-23 Author: coolkaveh [email protected] Greets To Mohammad Morteza Sanaie [email protected] Https://twitter.com/coolkaveh Vendor Homepage: http://www.techsmith.com/ Version: 11.0.1build93 Tested on: windows X...

Snagit v 8.2.1 DLL Hijacking Exploit

Exploit for windows platform in category local exploits ==================================== Snagit v 8.2.1 DLL Hijacking Exploit ==================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ ...

TechSmith Snagit Insecure Library Loading Vulnerability

This host is installed with TechSmith Snagit and is prone to insecure library loading vulnerability. OpenVAS Vulnerability Test $Id: gbtechsmithsnagitinsecurelibloadvuln.nasl 5364 2017-02-20 13:26:07Z cfi $ TechSmith Snagit Insecure Library Loading Vulnerability Authors: Sooraj KS Copyright:...

TechSmith Snagit Insecure Library Loading Vulnerability

TechSmith Snagit is prone to insecure library loading vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...