A vulnerability was found in Hainan ToDesk 4.7.6.3. It has been declared as critical. This vulnerability affects unknown code in the library profapi.dll of the component DLL File Parser. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
References
Link | Resource |
---|---|
https://vuldb.com/?ctiid.308284 | Permissions Required VDB Entry |
https://vuldb.com/?id.308284 | Third Party Advisory VDB Entry |
https://vuldb.com/?submit.566698 | Third Party Advisory VDB Entry |
https://www.yuque.com/ba1ma0-an29k/nnxoap/dgxzuhd90e19grpg?singleDoc | Permissions Required |
https://www.yuque.com/ba1ma0-an29k/nnxoap/dgxzuhd90e19grpg?singleDoc#%20%E3%80%8Atodesk%20program%20has%20a%20privilege%20escalation%20vulnerability%E3%80%8B | Permissions Required |
Configurations
History
08 Jul 2025, 17:02
Type | Values Removed | Values Added |
---|---|---|
References | () https://vuldb.com/?ctiid.308284 - Permissions Required, VDB Entry | |
References | () https://vuldb.com/?id.308284 - Third Party Advisory, VDB Entry | |
References | () https://vuldb.com/?submit.566698 - Third Party Advisory, VDB Entry | |
References | () https://www.yuque.com/ba1ma0-an29k/nnxoap/dgxzuhd90e19grpg?singleDoc - Permissions Required | |
References | () https://www.yuque.com/ba1ma0-an29k/nnxoap/dgxzuhd90e19grpg?singleDoc#%20%E3%80%8Atodesk%20program%20has%20a%20privilege%20escalation%20vulnerability%E3%80%8B - Permissions Required | |
First Time |
Todesk
Todesk todesk |
|
CPE | cpe:2.3:a:todesk:todesk:4.7.6.3:*:*:*:-:*:*:* |
12 May 2025, 15:16
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
|
References |
|
11 May 2025, 11:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-05-11 11:15
Updated : 2025-07-08 17:02
NVD link : CVE-2025-4539
Mitre link : CVE-2025-4539
CVE.ORG link : CVE-2025-4539
JSON object : View
Products Affected
todesk
- todesk