7.8
CVE-2022-36415
- EPSS 0.06%
- Veröffentlicht 23.07.2022 03:15:08
- Zuletzt bearbeitet 21.11.2024 07:12:58
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginA DLL hijacking vulnerability exists in the uninstaller in Scooter Beyond Compare 1.8a through 4.4.2 before 4.4.3 when installed via the EXE installer. The uninstaller attempts to load DLLs out of a Windows Temp folder. If a standard user places malicious DLLs in the C:\Windows\Temp\ folder, and then the uninstaller is run as SYSTEM, the DLLs will execute with elevated privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Scootersoftware ≫ Beyond Compare Version >= 1.8a < 4.4.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.06% | 0.173 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
CWE-427 Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.