Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the "End-User License Agreement" link, which executes Notepad with the privileges of the program that displays the about box.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Windows韩语输入法编辑器权限提升漏洞
Vulnerability Description
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。 Windows和Office韩语输入法编辑器(IME)中存在权限提升漏洞，可能允许恶意用户完全控制受影响的系统。攻击者可以通过终端服务连接到服务器或在控制台，在登录界面上，调出韩文输入法，点击查看授权许可的链接，这时Winlogon进程会以系统权限执行显示授权信息的notepad程序。此时用户以普通用户登录进系统，即可以利用这个高权限的notepad进程提升自己的访问能力。
CVSS Information
N/A
Vulnerability Type
N/A