Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Symantec PCAnywhere 10.x and 11, when started as a service, allows attackers to gain SYSTEM privileges via the help interface using AWHOST32.exe.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Symantec PCAnywhere本地权限提升漏洞
Vulnerability Description
Symantec pcAnywhere是一款功能强大的远程控制软件。 Symantec pcAnywhere的帮助接口存在权限控制问题,本地攻击者可以利用这个漏洞以SYSTEM权限执行任意指令。 PCAnywhere以服务启动或设置成以窗口启动,攻击者可以通过帮助接口获得SYSTEM权限。Symantec pcAnywhere帮助功能调用Windows操作系统帮助函数的接口,由于Windows帮助函数在调用应用程序时没有降低权限,因此如果Symantec以服务方式启动时,攻击者如果调用帮助接口GUI,可搜
CVSS Information
N/A
Vulnerability Type
N/A