CVE-2021-47896

High CVSS: 8.5

PDF Complete Corporate Edition 4.1.45 contains an unquoted service path vulnerability in the pdfcDispatcher service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in the service binary location to inject malicious executables that will be run with elevated LocalSystem privileges.

Vendor

Product

CWE

CWE-428

Yayın Tarihi

2026-01-23 17:15:58

Güncelleme

2026-01-26 15:03:33

Source Identifier

disclosure@vulncheck.com

KEV Date Added

Kategoriler

CWE-428 HIGH 2026

Referanslar

https://pdf-complete.informer.com/download/ https://www.exploit-db.com/exploits/49558 https://www.pdfcomplete.com/cms/dpl/tabid/111/Default.aspx?r=du2vH8r https://www.vulncheck.com/advisories/pdfcomplete-corporate-edition-pdfcdispatcher-unquoted-service-path https://www.exploit-db.com/exploits/49558