Recommended action window: Monitor and triage in normal cycle
NVD description
An issue was discovered in PDF24 Creator 11.14.0. The configuration of the msi installer file was found to produce a visible cmd.exe window when using the repair function of msiexec.exe. This allows an unprivileged local attacker to use a chain of actions (e.g., an oplock on faxPrnInst.log) to open a SYSTEM cmd.exe.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
3. mRemoteNG config.xml decrypted offline → RDP creds → user flag 4. PDF24 CVE-2023-49147 → oplock symlink → SYSTEM shell → root flag Full writeup: https://blog.charleskoome.com/posts/lock-hackthebox-writeup/ #HackTheBox #Infosec #PrivEsc #Windows #CVE
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | pdf24 | pdf24_creator | - | - | - |