Description (CNA)
An improper input validation vulnerability in Helpu solution could allow a local attacker to arbitrary file creation and execution without click file transfer menu. It is possible to file in arbitrary directory for user because the viewer program receive the file from agent with privilege of administrator.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HelpU / HelpuViewer.exe | affected 2018.5.21.0 through 2018.5.21.0 |
CWE
CWE-20
References
ADP enrichment
No English description supplied.