UploaderService in SnagIT 2019.1.2 allows elevation of privilege by placing an invalid presentation file in %PROGRAMDATA%\TechSmith\TechSmith Recorder\QueuedPresentations and then creating a symbolic link in %PROGRAMDATA%\Techsmith\TechSmith Recorder\InvalidPresentations that points to an arbitrary folder with an arbitrary file name. TechSmith Relay Classic Recorder prior to 5.2.1 on Windows is vulnerable. The vulnerability was introduced in SnagIT Windows 12.4.1.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2019-07-26T12:25:19
Updated: 2019-08-09T22:06:02
Reserved: 2019-07-07T00:00:00
Link: CVE-2019-13382
JSON object: View
NVD Information
Status : Modified
Published: 2019-07-26T13:15:12.423
Modified: 2020-08-24T17:37:01.140
Link: CVE-2019-13382
JSON object: View
Redhat Information
No data.
CWE