Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2020-7867

Helpu arbitrary file creation vulnerability

Description

An improper input validation vulnerability in Helpu solution could allow a local attacker to arbitrary file creation and execution without click file transfer menu. It is possible to file in arbitrary directory for user because the viewer program receive the file from agent with privilege of administrator.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HelpU HelpuViewer.exe

  • 2018.5.21.0 to ≤ 2018.5.21.0affected

References