PDF Saver 'AloahaCredentialProviderService.exe' Local Privilege Escalation Vulnerability

Bugtraq ID:	57466
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Jan 20 2013 12:00AM
Updated:	Jan 20 2013 12:00AM
Credit:	Gjoko Krstic
Vulnerable:	Aloaha Software PDF Saver 5.0.226
Not Vulnerable:

PDF Saver 'AloahaCredentialProviderService.exe' Local Privilege Escalation Vulnerability

PDF Saver is prone to a local privilege-escalation vulnerability.

Local attackers can exploit this issue to execute arbitrary code with elevated privileges.

PDF Saver 5.0.226 is vulnerable; other versions may also be affected.

PDF Saver 'AloahaCredentialProviderService.exe' Local Privilege Escalation Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

PDF Saver 'AloahaCredentialProviderService.exe' Local Privilege Escalation Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

PDF Saver 'AloahaCredentialProviderService.exe' Local Privilege Escalation Vulnerability

References:

• Aloaha Credential Provider Monitor 5.0.226 Local Privilege Escalation Vulnerabil (Zero Science Lab)
  
• PDF Saver Homepage (Aloaha)