CVE-2019-12569 - CVE House
Back to Database
Status published High CVE-2019-12569

A vulnerability in Viber before 10.7.0 for Desktop (Windows) could...

Vulnerability Description

A vulnerability in Viber before 10.7.0 for Desktop (Windows) could allow an attacker to execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search paths used by the application URI. An attacker could exploit this vulnerability by convincing a targeted user to follow a malicious link. Successful exploitation could cause the application to load libraries from the directory targeted by the URI link. The attacker could use this behavior to execute arbitrary commands on the system with the privileges of the targeted user, if the attacker can place a crafted library in a directory that is accessible to the vulnerable system.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-12569

Credits & Attribution

No credits recorded in the NVD database.

References

More from rakuten

View All →
CVE-2020-14049
Viber for Windows up to 13.2.0.39 does not properly quote...
High 7.5
CVE-2019-18800
Viber through 11.7.0.5 allows a remote attacker who can capture...
High 8.8

Affected Vendor

Affected Software

viber
Vulnerable Versions:
0

Timeline

Official Publish: June 3rd, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.