CVE-2019-25274

HIGH SEVERITY

CVSS Score & Metrics

Base Score

7.8 / 10

Vector String

                                        CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H                                    

Vulnerability Description

ProShow Producer 9.0.3797 contains an unquoted service path vulnerability in the ScsiAccess service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with LocalSystem privileges during service startup.

Vulnerability Details

Published Date

February 05, 2026

Last Modified

February 05, 2026

CWE ID

CWE-428

Source

NVD

Vendor

Photodex

Product

ProShow Producer

External References

http://www.photodex.com/
https://www.exploit-db.com/exploits/47705
https://www.vulncheck.com/advisories/proshow-producer-unquoted-service-path

CVE-2019-25274

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment