Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Popcorn Time 6.2 - 'Update service' Unquoted Service Path
Vulnerability Description
Popcorn Time 6.2.1.14 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can insert malicious executables in Program Files (x86) or system root directories to be executed with SYSTEM-level permissions during service startup.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
未经引用的搜索路径或元素
Vulnerability Title
Popcorn Time 代码问题漏洞
Vulnerability Description
Popcorn Time是Popcorn Time开源的一个多平台的免费软件 BitTorrent 客户端。 Popcorn Time 6.2.1.14版本存在代码问题漏洞，该漏洞源于未加引号的服务路径，可能导致本地非特权用户执行代码并提升系统权限。
CVSS Information
N/A
Vulnerability Type
N/A