Soda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in Soda PDF Desktop. This issue arises from the product loading an OpenSSL configuration file from an unsecured location, allowing attackers with low-privileged code execution capabilities to escalate privileges and execute arbitrary code with SYSTEM rights.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a local attacker to execute code with SYSTEM privileges.

Remediation

Due to the nature of this vulnerability, the recommended mitigation strategy is to limit interaction with the affected product.