PT-2020-10410 · Abbyy · Abbyy Finereader 15

Published 2020-08-13 · Updated 2020-08-19 · CVE-2019-20383

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ABBYY FineReader 15 versions prior to 15.0.112.2130

Description The issue allows escalation of privileges by local users via manipulations involving files and using symbolic links.

Recommendations For ABBYY FineReader 15 versions prior to 15.0.112.2130, update to Release 4 (aka 15.0.112.2130) or later to resolve the issue.

Exploit

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2019-20383

Affected Products

Abbyy Finereader 15

References · 6

• 🔥 https://amonitoring.ru/article/abbyy-lpe · Exploit
• http://abbyydownloads.com/fc12/r3/ReleaseNotes_FC12_R3_U1_1299.39_build_12.0.3.2634.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-20383 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20383 · Security Note
• https://support.abbyy.com/hc/en-us/articles/360008536920-FineReader-15-Change-Log · Vendor Advisory
• https://t.me/cibsecurity/14135 · Telegram Post