CVE-2020-11541: XEE
Published May 8, 2020
·Updated
In TechSmith SnagIt 11.2.1 through 20.0.3, an XML External Entity (XXE) injection issue exists that would allow a local attacker to exfiltrate data under the local Administrator account.
Affected Software
1 affected component
Techsmith Snagit>=11.2.1<=20.0.3
Event History
May 8, 2020
CVE Published
via MITRE·01:05 PM
Data Sourced
via MITRE·01:05 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-11541?
CVE-2020-11541 is rated as medium severity due to its potential for local exploitation by an attacker.
2
How do I fix CVE-2020-11541?
To fix CVE-2020-11541, users should upgrade to TechSmith SnagIt version 20.0.4 or later.
3
Who is affected by CVE-2020-11541?
Users of TechSmith SnagIt versions 11.2.1 through 20.0.3 are affected by CVE-2020-11541.
4
What type of vulnerability is CVE-2020-11541?
CVE-2020-11541 is an XML External Entity (XXE) injection vulnerability.
5
What can an attacker do with CVE-2020-11541?
An attacker can exfiltrate data under the local Administrator account due to CVE-2020-11541.