CVE-2024-42053

Name of the Vulnerable Software and Affected Versions Splashtop Streamer for Windows versions prior to 3.6.0.0

Description The issue concerns the MSI installer for Splashtop Streamer for Windows, which uses a temporary folder with weak permissions during installation. This weakness can be exploited by a local user to escalate privileges to SYSTEM by placing a version.dll file in the folder.

Recommendations For versions prior to 3.6.0.0, update to version 3.6.0.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the temporary folder used during installation to minimize the risk of exploitation.