Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Untrusted Search Path in SumatraPDF Reader (explorer.exe on Windows)
Vulnerability Description
SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, the PDF reader allows execution of a malicious binary (explorer.exe) located in the same directory as the opened PDF when the user clicks File → “Show in folder”. This behavior leads to arbitrary code execution on the victim’s system with the privileges of the current user, without any warning or user interaction beyond the menu click.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
不可信的搜索路径
Vulnerability Title
sumatrapdf 代码问题漏洞
Vulnerability Description
sumatrapdf是sumatrapdfreader开源的一个PDF阅读器。 SumatraPDF 3.5.2及之前版本存在代码问题漏洞，该漏洞源于PDF阅读器允许执行与打开的PDF位于同一目录中的恶意二进制文件，可能导致任意代码执行。
CVSS Information
N/A
Vulnerability Type
N/A