An issue was discovered in PDF24 Creator 11.14.0. The configuration of the msi installer file was found to produce a visible cmd.exe window when using the repair function of msiexec.exe. This allows an unprivileged local attacker to use a chain of actions (e.g., an oplock on faxPrnInst.log) to open a SYSTEM cmd.exe.
References
| Link | Resource |
|---|---|
| http://seclists.org/fulldisclosure/2023/Dec/18 | Exploit Mailing List Third Party Advisory |
| http://packetstormsecurity.com/files/176206/PDF24-Creator-11.15.1-Local-Privilege-Escalation.html | Exploit Third Party Advisory VDB Entry |
| https://sec-consult.com/vulnerability-lab/advisory/local-privilege-escalation-via-msi-installer-in-pdf24-creator-geek-software-gmbh/ | Exploit Third Party Advisory |
Configurations
History
02 Jan 2024, 14:26
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CWE | NVD-CWE-noinfo | |
| First Time |
Pdf24
Pdf24 pdf24 Creator |
|
| CPE | cpe:2.3:a:pdf24:pdf24_creator:*:*:*:*:*:*:*:* | |
| References | () https://sec-consult.com/vulnerability-lab/advisory/local-privilege-escalation-via-msi-installer-in-pdf24-creator-geek-software-gmbh/ - Exploit, Third Party Advisory | |
| References | () http://seclists.org/fulldisclosure/2023/Dec/18 - Exploit, Mailing List, Third Party Advisory | |
| References | () http://packetstormsecurity.com/files/176206/PDF24-Creator-11.15.1-Local-Privilege-Escalation.html - Exploit, Third Party Advisory, VDB Entry |
19 Dec 2023, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-19 23:15
Updated : 2024-01-02 14:26
NVD link : CVE-2023-49147
Mitre link : CVE-2023-49147
JSON object : View
Products Affected
pdf24
- pdf24_creator
CWE