CVE-2023-53946highCWE-428

Arcsoft PhotoStudio 6.0.0.172 Unquoted Service Path Privilege Escalation

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.5epss 0.2%

probabilidade de exploração

0.2%top 95% das CVEs

exploração observada

nãonenhuma fonte reporta

Arcsoft PhotoStudio 6.0.0.172 contains an unquoted service path vulnerability in the ArcSoft Exchange Service that allows local attackers to escalate privileges. Attackers can place a malicious executable in the unquoted path and trigger the service to execute arbitrary code with system-level permissions.

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Produtos afetados

Arcsoft · PhotoStudio

Referências

https://www.arcsoft.com/https://www.exploit-db.com/exploits/51393 https://www.vulncheck.com/advisories/arcsoft-photostudio-unquoted-service-path-privilege-escalation