CVEvulnerability
CVE-2020-9418
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-03-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-426
Description
An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attacker to gain privileges and execute code via DLL hijacking.
Affected configurations
• redsoftware pdfescape (<= 4.0.22)
Related
Weakness · CWE (1)
- CWE-426 Untrusted Search Path weakness
References
- https://support.pdfescape.com/hc/en-us/articles/360039586551 Vendor Advisory
- https://support.pdfescape.com/hc/en-us/articles/360039586551 Vendor Advisory