KioWare for Windows (versions all through 8.34) allows to escape the environment by downloading PDF files, which then by default are opened in an external PDF viewer. By using built-in functions of that viewer it is possible to launch a web browser, search through local files and, subsequently, launch any program with user privileges.
The product does not sufficiently protect all possible paths that a user can take to access restricted functionality or resources.
Link | Tags |
---|---|
https://cert.pl/posts/2024/04/CVE-2024-3459 | third party advisory broken link |
https://cert.pl/en/posts/2024/04/CVE-2024-3459 | third party advisory broken link |
https://www.kioware.com/ | product |