Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple untrusted search path vulnerabilities in installer in Synology Assistant before 6.1-15163 on Windows allows local attackers to execute arbitrary code and conduct DLL hijacking attack via a Trojan horse (1) shfolder.dll, (2) ntmarta.dll, (3) secur32.dll or (4) dwmapi.dll file in the current working directory.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Synology Assistant on Windows安装程序安全漏洞
Vulnerability Description
Synology Assistant on Windows是群晖科技（Synology）公司的一个基于Windows的安装小助手。installer是其中的一个安装程序。 基于Windows平台的Synology Assistant 6.1-15163之前的版本的安装程序中存在不可信的搜索路径漏洞。本地攻击者可借助当前工作目录下的恶意文件利用该漏洞执行任意代码，实施DLL劫持攻击（恶意文件包括：(1) shfolder.dll，(2) ntmarta.dll，(3) secur32.dll或(4) dwm
CVSS Information
N/A
Vulnerability Type
N/A