CVE-2019-12569

A vulnerability in Viber before 10.7.0 for Desktop (Windows) could allow an attacker to execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search paths used by the application URI. An attacker could exploit this vulnerability by convincing a targeted user to follow a malicious link. Successful exploitation could cause the application to load libraries from the directory targeted by the URI link. The attacker could use this behavior to execute arbitrary commands on the system with the privileges of the targeted user, if the attacker can place a crafted library in a directory that is accessible to the vulnerable system.

• CWE-426

• https://github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-006.md
• https://github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-006.md

Published

Jun 3, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1256An elevation of privilege vulnerability exists in Windows wh…7.8
• CVE-2019-12562Stored Cross-Site Scripting in DotNetNuke (DNN) Version befo…6.1
• CVE-2019-12564In DouCo DouPHP v1.5 Release 20190516, remote attackers can …
• CVE-2019-12566The WP Statistics plugin through 12.6.5 for Wordpress has st…
• CVE-2019-12567Stack-based overflow vulnerability in the logMess function i…9.8
• CVE-2019-12568Stack-based overflow vulnerability in the logMess function i…9.8
• CVE-2019-1257A remote code execution vulnerability exists in Microsoft Sh…8.8
• CVE-2019-12570A SQL injection vulnerability in the Xpert Solution "Server …
• CVE-2019-12571A vulnerability in the London Trust Media Private Internet A…
• CVE-2019-12572A vulnerability in the London Trust Media Private Internet A…
• CVE-2019-12573A vulnerability in the London Trust Media Private Internet A…
• CVE-2019-12574A vulnerability in the London Trust Media Private Internet A…