CVE-2024-42051

Summary

CVE-2024-42051 is a vulnerability affecting the MSI installer for Splashtop Streamer for Windows prior to version 3.6.2.0. The issue arises due to weak permissions on a temporary folder used during installation. A local user can exploit this vulnerability by replacing InstRegExp.reg in the folder, thereby escalating their privileges to the SYSTEM level. This vulnerability poses a significant risk and demands immediate attention from users to update their Splashtop Streamer software to the latest version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.