PT-2019-15363 · Hotkeyp · Hotkeyp

Publicado 2019-11-21 · Atualizado 2020-08-24 · CVE-2019-18349

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HotkeyP versions through 4.9 r96

Description The issue allows privilege escalation in the privilege function located in Commands.cpp.

Recommendations For versions through 4.9 r96, update to a version that contains a fix for this issue to prevent privilege escalation.

Exploit

Correção

Identificadores relacionados

CVE-2019-18349

Produtos afetados

Hotkeyp

Referências · 5

• 🔥 https://gist.github.com/matt-thibodeau/8bf16bba4c2a13978ed4e5fd08fbe2c2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-18349 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-18349 · Aviso do Fabricante
• https://sourceforge.net/p/hotkeyp/code/HEAD/tree/trunk/source/Commands.cpp · Nota
• https://sourceforge.net/p/hotkeyp/code/HEAD/tree/trunk/WhatsNew.txt · Nota