CVE-2023-49147

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-49147
An issue was discovered in PDF24 Creator 11.14.0. The configuration of the msi installer file was found to produce a visible cmd.exe window when using the repair function of msiexec.exe. This allows an unprivileged local attacker to use a chain of actions (e.g., an oplock on faxPrnInst.log) to open a SYSTEM cmd.exe.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
http://packetstormsecurity.com/files/176206/PDF24-Creator-11.15.1-Local-Privilege-Escalation.html Exploit Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2023/Dec/18 Exploit Mailing List Third Party Advisory
https://sec-consult.com/vulnerability-lab/advisory/local-privilege-escalation-via-msi-installer-in-pdf24-creator-geek-software-gmbh/ Exploit Third Party Advisory
http://packetstormsecurity.com/files/176206/PDF24-Creator-11.15.1-Local-Privilege-Escalation.html Exploit Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2023/Dec/18 Exploit Mailing List Third Party Advisory
https://sec-consult.com/vulnerability-lab/advisory/local-privilege-escalation-via-msi-installer-in-pdf24-creator-geek-software-gmbh/ Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:pdf24:pdf24_creator:*:*:*:*:*:*:*:*
History

21 Nov 2024, 08:32

Type Values Removed Values Added
References () http://packetstormsecurity.com/files/176206/PDF24-Creator-11.15.1-Local-Privilege-Escalation.html - Exploit, Third Party Advisory, VDB Entry () http://packetstormsecurity.com/files/176206/PDF24-Creator-11.15.1-Local-Privilege-Escalation.html - Exploit, Third Party Advisory, VDB Entry
References () http://seclists.org/fulldisclosure/2023/Dec/18 - Exploit, Mailing List, Third Party Advisory () http://seclists.org/fulldisclosure/2023/Dec/18 - Exploit, Mailing List, Third Party Advisory
References () https://sec-consult.com/vulnerability-lab/advisory/local-privilege-escalation-via-msi-installer-in-pdf24-creator-geek-software-gmbh/ - Exploit, Third Party Advisory () https://sec-consult.com/vulnerability-lab/advisory/local-privilege-escalation-via-msi-installer-in-pdf24-creator-geek-software-gmbh/ - Exploit, Third Party Advisory

02 Jan 2024, 14:26

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CPE cpe:2.3:a:pdf24:pdf24_creator:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
References () http://seclists.org/fulldisclosure/2023/Dec/18 - () http://seclists.org/fulldisclosure/2023/Dec/18 - Exploit, Mailing List, Third Party Advisory
References () http://packetstormsecurity.com/files/176206/PDF24-Creator-11.15.1-Local-Privilege-Escalation.html - () http://packetstormsecurity.com/files/176206/PDF24-Creator-11.15.1-Local-Privilege-Escalation.html - Exploit, Third Party Advisory, VDB Entry
References () https://sec-consult.com/vulnerability-lab/advisory/local-privilege-escalation-via-msi-installer-in-pdf24-creator-geek-software-gmbh/ - () https://sec-consult.com/vulnerability-lab/advisory/local-privilege-escalation-via-msi-installer-in-pdf24-creator-geek-software-gmbh/ - Exploit, Third Party Advisory

20 Dec 2023, 13:50

Type Values Removed Values Added
New CVE
Information

Published : 2023-12-19 23:15

Updated : 2024-11-21 08:32

NVD link : CVE-2023-49147

Mitre link : CVE-2023-49147

CVE.ORG link : CVE-2023-49147

JSON object : View

Products Affected

pdf24

  • pdf24_creator
CWE
NVD-CWE-noinfo