PT-2025-52517 · Arcsoft · Arcsoft Photostudio

Msd0Pe · Publicado 2025-12-19 · Atualizado 2025-12-20 · CVE-2023-53946

Positive Technologies (AI Summary)

CVSS v3.1

8.4

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Arcsoft PhotoStudio version 6.0.0.172

Description Arcsoft PhotoStudio 6.0.0.172 contains an unquoted service path vulnerability within the ArcSoft Exchange Service. This allows local attackers to potentially escalate privileges. Specifically, attackers can place a malicious executable within an unquoted path, and the service may execute this code with system-level permissions.

Recommendations Apply appropriate quoting to the service path to prevent the execution of unauthorized executables.

Exploit

Correção

LPE

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2023-53946

Produtos afetados

Arcsoft Photostudio

Referências · 6

• 🔥 https://exploit-db.com/exploits/51393 · Exploit
• https://twitter.com/CVEnew/status/2002466771924574285 · Publicação no Twitter
• https://arcsoft.com · Nota
• https://t.me/CVEtracker/40309 · Publicação no Telegram
• https://vulncheck.com/advisories/arcsoft-photostudio-unquoted-service-path-privilege-escalation · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-53946 · Nota de Segurança