Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Argument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted attackers to execute arbitrary commands via a crafted file with a "/" (slash) character in the filename of the Command Line property, followed by a valid file extension, which causes the command before the slash to be executed, aka "Object Packager Dialogue Spoofing Vulnerability."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Windows对象包装程序对话框欺骗漏洞
Vulnerability Description
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。 Windows的对象包装程序(packager.exe)在处理命令行属性时存在输入验证错误，本地攻击者可能利用此漏洞提升自己的权限。 攻击者可以通过在命令行属性中包含"/"斜线字符欺骗包装程序对话框中的文件名和相关文件类型。这允许攻击者诱骗用户打开包含有嵌入Package对象的Rich Tex或Word文档导致在用户系统上执行任意shell命令。
CVSS Information
N/A
Vulnerability Type
N/A