title: HelpU Overflow Vulnerability
description: A vulnerability in agent program of HelpU remote control solution could allow an authenticated remote attacker to execute arbitrary commands This vulnerability is due to insufficient input santization when communicating customer process.
problem types: CWE-20 Improper Input Validation
affected:
{
platforms: x86, x64
product: HelpuViewer.exe
vendor: Helpu,inc
versions:
lessThanOrEqual: 2020.11.20.0, status: affected, version: 2018.5.21.0, versionType: custom
}
{
platforms: x86, x64
product: HelpuServer.exe
vendor: Helpu,inc
versions:
lessThanOrEqual: 2020.11.20.0, status: affected, version: 1.0.0.2, versionType: custom
}
{
platforms: x86, x64
product: HelpuFTClient.dll
vendor: Helpu,inc
versions:
status: affected, version: 3.0.0.0 2020.11.20.0
}
{
platforms: x86, x64
product: HelpuFTServer.dll
vendor: Helpu,inc
versions:
status: affected, version: 3.0.0.0 2020.11.20.0
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]