Description
Wondershare PDFelement 5.2.9 contains a privilege escalation vulnerability due to an unquoted service path in the WsAppService Windows service. Local attackers can place a malicious executable in the service path and execute code with LocalSystem privileges upon service restart or system reboot.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Wondershare | PDFelement | 5.2.9 | — |
References
- ExploitDB-40535 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: Wondershare PDFelement 5.2.9 Privilege Escalation via Unquoted Service Path third-party-advisory