CVE-2019-12788

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An issue was discovered in Photodex ProShow Producer v9.0.3797 (an application that runs with Administrator privileges). It is possible to perform a buffer overflow via a crafted file.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/153249/ProShow-9.0.3797-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
https://github.com/risataimpt/Archivos_del_Blog/tree/master/ProshowThird Party Advisory
https://risataim.blogspot.com/2019/06/exploit-local-para-proshow.htmlExploit, Third Party Advisory
http://packetstormsecurity.com/files/153249/ProShow-9.0.3797-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
https://github.com/risataimpt/Archivos_del_Blog/tree/master/ProshowThird Party Advisory
https://risataim.blogspot.com/2019/06/exploit-local-para-proshow.htmlExploit, Third Party Advisory

Timeline

Published: Jun 10, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-127896.8An issue was discovered on Actiontec T2200H T2200H-31.128L.08 devices, as distributed by Telus. By attaching a UART adapter to the UART pins CVE-2019-127907.8In radare2 through 3.5.1, there is a heap-based buffer over-read in the r_egg_lang_parsechar function of egg_lang.c. This allows remote atta CVE-2019-127918.8A directory traversal vulnerability in the v-list-user script in Vesta Control Panel 0.9.8-24 allows remote attackers to escalate from regul CVE-2019-127928.8A command injection vulnerability in UploadHandler.php in Vesta Control Panel 0.9.8-24 allows remote attackers to escalate from regular regi CVE-2019-127946.6An issue was discovered in MISP 2.4.108. Organization admins could reset credentials for site admins (organization admins have the inherent CVE-2019-127957.8daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server soc CVE-2019-127979.8A clone version of an ELM327 OBD2 Bluetooth device has a hardcoded PIN, leading to arbitrary commands to an OBD-II bus of a vehicle.CVE-2019-127989.8An issue was discovered in Artifex MuJS 1.0.5. regcompx in regexp.c does not restrict regular expression program size, leading to an overflo CVE-2019-127998.8In createInstanceFromNamedArguments in Shopware through 5.6.x, a crafted web request can trigger a PHP object instantiation vulnerability, w CVE-2019-12807.8A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An atta CVE-2019-128016.1out/out.GroupMgr.php in SeedDMS 5.1.11 has Stored XSS by making a new group with a JavaScript payload as the "GROUP" Name.CVE-2019-128027.8In radare2 through 3.5.1, the rcc_context function of libr/egg/egg_lang.c mishandles changing context. This allows remote attackers to cause