Vulnerabilities > Techsmith > Snagit > 2019.1.2

DATE CVE VULNERABILITY TITLE RISK
2019-07-26 CVE-2019-13382 Link Following vulnerability in Techsmith Snagit 2019.1.2
UploaderService in SnagIT 2019.1.2 allows elevation of privilege by placing an invalid presentation file in %PROGRAMDATA%\TechSmith\TechSmith Recorder\QueuedPresentations and then creating a symbolic link in %PROGRAMDATA%\Techsmith\TechSmith Recorder\InvalidPresentations that points to an arbitrary folder with an arbitrary file name.
local
low complexity
techsmith CWE-59
7.8