Browse CVEs

HIGH 8.8 CVE-2020-18171 TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding (OLE) which can allow attackers to obfuscate and embed crafted files used to escalate … Snagit No fix yet Fix from $1,9502021-07-26 HIGH 7.8 CVE-2020-18169 A vulnerability in the Windows installer XML (WiX) toolset of TechSmith Snagit 19.1.1.2860 allows attackers to escalate privileges. NOTE: Exploit of … Snagit No fix yet Fix from $1,9502021-07-26 MEDIUM 5.5 CVE-2020-11541 In TechSmith SnagIt 11.2.1 through 20.0.3, an XML External Entity (XXE) injection issue exists that would allow a local attacker to exfiltrate data u… Snagit after 20.0.3 Fix from $1,6002020-05-08 HIGH 7.8 CVE-2019-13382 UploaderService in SnagIT 2019.1.2 allows elevation of privilege by placing an invalid presentation file in %PROGRAMDATA%\TechSmith\TechSmith Recorde… Snagit No fix yet Fix from $1,9502019-07-26 HIGH 8.8 CVE-2018-14446 MP4Integer32Property::Read in atom_avcC.cpp in MP4v2 2.1.0 allows remote attackers to cause a denial of service (heap-based buffer overflow and appli… Mp4v2 Mitigation only Fix from $1,9502018-07-20 CRITICAL 9.8 CVE-2018-14403 MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to use of an inappropriate data type for associated at… Mp4v2 No fix yet Fix from $2,3002018-07-19 HIGH 8.8 CVE-2018-14379 MP4Atom::factory in mp4atom.cpp in MP4v2 2.0.0 incorrectly uses the MP4ItemAtom data type in a certain case where MP4DataAtom is required, which allo… Mp4v2 Mitigation only Fix from $1,9502018-07-18 HIGH 8.8 CVE-2018-14325 In MP4v2 2.0.0, there is an integer underflow (with resultant memory corruption) when parsing MP4Atom in mp4atom.cpp. Mp4v2 No fix yet Fix from $1,9502018-07-16 HIGH 8.8 CVE-2018-14326 In MP4v2 2.0.0, there is an integer overflow (with resultant memory corruption) when resizing MP4Array for the ftyp atom in mp4array.h. Mp4v2 No fix yet Fix from $1,9502018-07-16 CRITICAL 9.8 CVE-2018-14054 A double free exists in the MP4StringProperty class in mp4property.cpp in MP4v2 2.0.0. A dangling pointer is freed again in the destructor once an ex… Mp4v2 No fix yet Fix from $2,3002018-07-13 MEDIUM 6.9 CVE-2010-5234 Multiple untrusted search path vulnerabilities in Camtasia Studio 7.0.1 build 57 allow local users to gain privileges via a Trojan horse (1) MFC90ENU… Camtasia Studio Mitigation only Fix from $1,6002012-09-07 HIGH 9.3 CVE-2010-3130EPSS 8% Untrusted search path vulnerability in TechSmith Snagit all versions 10.x and 11.x allows local users, and possibly remote attackers, to execute arbi… Snagit No fix yet Fix from $1,9502010-08-26