CoreCVE
Back

HIGH

UploaderService in SnagIT 2019.1.2 allows elevation of privilege by placing an invalid presentation file in %PROGRAMDATA%\TechSmith\TechSmith Recorder\QueuedPresentations and then creating a symbolic link in %PROGRAMDATA%\Techsmith\TechSmith Recorder\InvalidPresentations that points to an arbitrary folder with an arbitrary file name

Published Jul 26, 2019

Description

UploaderService in SnagIT 2019.1.2 allows elevation of privilege by placing an invalid presentation file in %PROGRAMDATA%\TechSmith\TechSmith Recorder\QueuedPresentations and then creating a symbolic link in %PROGRAMDATA%\Techsmith\TechSmith Recorder\InvalidPresentations that points to an arbitrary folder with an arbitrary file name. TechSmith Relay Classic Recorder prior to 5.2.1 on Windows is vulnerable. The vulnerability was introduced in SnagIT Windows 12.4.1.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-59

References (4)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jul 26, 2019
Updated Aug 4, 2024
Reserved Jul 7, 2019
Link CVE-2019-13382
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2019-13382
Red Hat
Severity n/a
Public date n/a
Links CVE-2019-13382
ENISA EUVD
Assigner mitre
Published Jul 26, 2019
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2019-4878
EUVD-2019-4878