PT-2019-15363 · Hotkeyp · Hotkeyp

Published 2019-11-21 · Updated 2020-08-24 · CVE-2019-18349

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HotkeyP versions through 4.9 r96

Description The issue allows privilege escalation in the privilege function located in Commands.cpp.

Recommendations For versions through 4.9 r96, update to a version that contains a fix for this issue to prevent privilege escalation.

Exploit

Fix

Related Identifiers

CVE-2019-18349

Affected Products

Hotkeyp

References · 5

• 🔥 https://gist.github.com/matt-thibodeau/8bf16bba4c2a13978ed4e5fd08fbe2c2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-18349 · Security Note
• https://osv.dev/vulnerability/CVE-2019-18349 · Vendor Advisory
• https://sourceforge.net/p/hotkeyp/code/HEAD/tree/trunk/source/Commands.cpp · Note
• https://sourceforge.net/p/hotkeyp/code/HEAD/tree/trunk/WhatsNew.txt · Note