Skip to content
OpenAdvisories
High · 7.8 CVE-2024-41139 EUVD-2024-38946GHSA-j4gx-xfw8-qq8h

Incorrect privilege assignment vulnerability exists in SKYSEA Client View Ver.6.010.06 to Ver.19.210.04e. If a user who can log in to the P…

Published Jul 29, 2024 · Updated Aug 12, 2024 · Assigned by jpcert

Description

Incorrect privilege assignment vulnerability exists in SKYSEA Client View Ver.6.010.06 to Ver.19.210.04e. If a user who can log in to the PC where the product's Windows client is installed places a specially crafted DLL file in a specific folder, arbitrary code may be executed with SYSTEM privilege.

Affected products

VendorProductAffectedFixed
Sky SKYSEA Client View Ver.6.010.06 to Ver.19.210.04e —

References