CVE-2020-18169: High severity Techsmith Snagit vulnerability

Published Jul 26, 2021

Updated

DISPUTED A vulnerability in the Windows installer XML (WiX) toolset of TechSmith Snagit 19.1.1.2860 allows attackers to escalate privileges. NOTE: Exploit of the Snagit installer would require the end user to ignore other safety mechanisms provided by the Host OS. See reference document for more details.

Affected Software

4 affected components

All of the following

Techsmith Snagit=19.1.1.2860

Microsoft Windows

Techsmith Snagit=19.1.1.2860

Microsoft Windows

Event History

Jul 26, 2021

CVE Published

via MITRE·06:26 PM

Data Sourced

via MITRE·06:26 PM

Description

Disputed

08:15 PM

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2020-18169?

CVE-2020-18169 has a disputed severity rating, as exploitation requires user intervention against the Host OS safety mechanisms.

How do I fix CVE-2020-18169?

To address CVE-2020-18169, ensure that you are using a version of TechSmith Snagit that is not affected, or apply patches provided by TechSmith if available.

What software is affected by CVE-2020-18169?

CVE-2020-18169 affects TechSmith Snagit version 19.1.1.2860.

Is CVE-2020-18169 remotely exploitable?

CVE-2020-18169 is not remotely exploitable; it requires local user interaction to exploit.

What type of vulnerability is CVE-2020-18169?

CVE-2020-18169 is a privilege escalation vulnerability within the Windows installer XML (WiX) toolset.