CVE-2020-36957

Impact

PDF Complete 3.5.310.2002 contains an unquoted service path vulnerability in its pdfsvc.exe service configuration. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://pdf-complete.informer.com/3.5/
• https://www.exploit-db.com/exploits/49226
• https://www.vulncheck.com/advisories/pdf-complete-pdfsvcexe-unquoted-service-path