A vulnerability, which was classified as critical, was found in Splashtop Streamer up to 3.5.7.x on Windows. Affected is an unknown function of the file wevtutil.exe of the component Installation Handler. The manipulation leads to creation of temporary file in directory with insecure permissions.

This vulnerability is traded as CVE-2024-42052. An attack has to be approached locally. There is no exploit available.

It is recommended to upgrade the affected component.