Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Internet Security 2001 through 2004, SystemWorks 2001 through 2004, and AntiVirus and Norton AntiVirus Pro 2001 through 2004, AntiVirus for Handhelds v3.0, allows local users to gain SYSTEM privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Symantec LiveUpdate本地权限提升漏洞
Vulnerability Description
Symantec LiveUpdate是大量symantec应用系统用于自动升级的程序。 Symantec LiveUpdate在建立交互会话时不够安全，本地攻击者可以利用这个漏洞提升权限。 当非特权用户登后，在Windows任务栏中可以会显示"there are Live Updates available， click here to run LiveUpdate"的小 窗口，如果点击运行在线自动升级，会发现LUALL.exe和LUCOMS~1.exe会以用户SYSTEM上下文运行，点击帮助按钮，会出
CVSS Information
N/A
Vulnerability Type
N/A