CVE-2024-42051

The MSI installer for Splashtop Streamer for Windows before 3.6.2.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM by replacing InstRegExp.reg.

The MSI installer for Splashtop Streamer for Windows before 3.6.2.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM by replacing InstRegExp.reg.

El instalador MSI para Splashtop Streamer para Windows anterior a 3.6.2.0 utiliza una carpeta temporal con permisos débiles durante la instalación. Un usuario local puede aprovechar esto para escalar privilegios a SYSTEM reemplazando InstRegExp.reg.