Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Kaspersky Anti-Spam 3.0 MP1 before Critical Fix 2 (3.0.278.4) sets incorrect permissions for application files in certain upgrade scenarios, which might allow local users to gain privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Kaspersky Anti-Spam不安全文件权限漏洞
Vulnerability Description
Kaspersky Anti-Spam是俄罗斯卡巴斯基实验室（Kaspersky Lab）研发的一款用于杀毒产品中的反垃圾邮件组件。 Kaspersky Anti-Spam 3.0 MP1在升级到3.0.278.4之前的某些应用文件的升级脚本存在漏洞，本地攻击者可能利用此漏洞提升自己的权限。 如果使用修改过的应用程序文件软件包将应用程序组件的文件从之前版本升级到新版的话，就会对文件设置不安全的访问权限，允许本地攻击者获得非授权访问。
CVSS Information
N/A
Vulnerability Type
N/A