Skip to content
OpenAdvisories
High · 8.0 CVE-2020-7867 EUVD-2020-28799GHSA-c34g-9x5j-hq7p

Helpu arbitrary file creation vulnerability

Published Oct 27, 2021 · Updated Aug 4, 2024 · Assigned by krcert

Description

An improper input validation vulnerability in Helpu solution could allow a local attacker to arbitrary file creation and execution without click file transfer menu. It is possible to file in arbitrary directory for user because the viewer program receive the file from agent with privilege of administrator.

Affected products

VendorProductAffectedFixed
HelpU HelpuViewer.exe 2018.5.21.0 – ≤ 2018.5.21.0 —

References