Podatność CVE-2024-35288
Publikacja: 2024-10-09

Opis:
Nitro PDF Pro before 13.70.8.82 and 14.x before 14.26.1.0 allows Local Privilege Escalation in the MSI Installer because custom actions occur unsafely in repair mode. CertUtil is run in a conhost.exe window, and there is a mechanism allowing CTRL+o to launch cmd.exe as NT AUTHORITY\SYSTEM.

W naszej bazie, znaleźliśmy następujące noty dla tego CVE:
Tytuł
Autor
Data
Med.
Nitro PDF Pro Local Privilege Escalation
Sandro Einfeldt
02.10.2024

Typ:

CWE-264

 (Permissions, Privileges, and Access Controls)

 Referencje:
https://www.gonitro.com/support/downloads#securityUpdates
https://seclists.org/fulldisclosure/2024/Sep/59
https://sec-consult.com/vulnerability-lab/advisory/local-privilege-escalation-via-msi-installer-in-nitro-pdf-pro/
Copyright 2024, cxsecurity.com

 

Back to Top