Description
PDF Complete 3.5.310.2002 contains an unquoted service path vulnerability in its pdfsvc.exe service configuration. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Pdf-Complete | PDF Complete | ≤ 3.5.310.2002 | — |
References
- ExploitDB-49226 exploit
- PDF Complete Vendor Homepage product
- VulnCheck Advisory: PDF Complete 3.5.310.2002 - 'pdfsvc.exe' Unquoted Service Path third-party-advisory