SpacePlant/Vulns

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-42051 ↗	Jul 28, 2024Sunday, 28 July 2024, 03:15	7.8 HIGH	—
The MSI installer for Splashtop Streamer for Windows before 3.6.2.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM by replacing InstRegExp.reg.
CVE-2024-42052 ↗	Jul 28, 2024Sunday, 28 July 2024, 03:15	7.8 HIGH	—
The MSI installer for Splashtop Streamer for Windows before 3.5.8.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM by placing a wevtutil.exe file in the folder.
CVE-2024-42053 ↗	Jul 28, 2024Sunday, 28 July 2024, 03:15	7.8 HIGH	—
The MSI installer for Splashtop Streamer for Windows before 3.6.0.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM by placing a version.dll file in the folder.
CVE-2024-42050 ↗	Jul 28, 2024Sunday, 28 July 2024, 03:15	7 HIGH	—
The MSI installer for Splashtop Streamer for Windows before 3.7.0.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM via an oplock on CredProvider_Inst.reg.