CVE-2019-12788

HIGH

Photodex Proshow Producer - Out-of-Bounds Write

Title source: rule

Description

An issue was discovered in Photodex ProShow Producer v9.0.3797 (an application that runs with Administrator privileges). It is possible to perform a buffer overflow via a crafted file.

Exploits (1)

exploitdb WORKING POC

by Yonatan_Correa · pythonlocalwindows

https://www.exploit-db.com/exploits/46980

View Code ZIP pw:eip

References (3)

[Exploit, Third Party Advisory] https://risataim.blogspot.com/2019/06/exploit-local-para-proshow.html

[Third Party Advisory] https://github.com/risataimpt/Archivos_del_Blog/tree/master/Proshow

[Exploit, Third Party Advisory, VDB Entry] http://packetstormsecurity.com/files/153249/ProShow-9.0.3797-Privilege-Escalation.html

Scores

CVSS v3 7.8

EPSS 0.0322

EPSS Percentile 87.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-787

Status published

Products (1)

photodex/proshow_producer 9.0.3797

Published Jun 10, 2019

Tracked Since Feb 18, 2026