NetSight
high7.8

CVE-2019-20362

In Teradici PCoIP Agent before 19.08.1 and PCoIP Client before 19.08.3, an unquoted service path can cause execution of %PROGRAMFILES(X86)%\Teradici\PCoIP.exe …

Impact

In Teradici PCoIP Agent before 19.08.1 and PCoIP Client before 19.08.3, an unquoted service path can cause execution of %PROGRAMFILES(X86)%\Teradici\PCoIP.exe instead of the intended pcoip_vchan_printing_svc.exe file.

Affected products

VendorProductAffected versions
TeradiciPcoip Standard Agent
before 19.08.1
TeradiciPcoip Graphics Agent
before 19.08.1
TeradiciPcoip Client
before 19.08.3

Weakness classification

References