CVE-2018-19113

The Pronestor PNHM (aka Health Monitoring or HealthMonitor) add-in before 8.1.13.0 for Outlook has "BUILTIN\Users:(I)(F)" permissions for the "%PROGRAMFILES(X86)%\proNestor\Outlook add-in for Pronestor\PronestorHealthMonitor.exe" file, which allows local users to gain privileges via a Trojan horse PronestorHealthMonitor.exe file.

CVSS v3.0

7.3 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0

4.4 MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.85% chance of exploitation in the next 30 days, 56th percentile

Published

2019-04-01

Updated

2024-08-05

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/46988

References

• CVE Record
• NVD entry

Related

• CVE-2018-19105
• CVE-2018-19125
• CVE-2018-19092
• CVE-2018-19126
• CVE-2018-19082
• CVE-2018-19127