Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2020-37254

Wondershare PDFelement 5.2.9 Privilege Escalation via Unquoted Service Path

Description

Wondershare PDFelement 5.2.9 contains a privilege escalation vulnerability due to an unquoted service path in the WsAppService Windows service. Local attackers can place a malicious executable in the service path and execute code with LocalSystem privileges upon service restart or system reboot.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Wondershare PDFelement

  • 5.2.9affected

References