N/A

An issue was discovered in Listary through 6. An attacker can create a \\.\pipe\Listary.listaryService named pipe and wait for a privileged user to open a session on the Listary installed host. Listary will automatically access the named pipe and the attacker will be able to duplicate the victim's token to impersonate him. This exploit is valid in certain Windows versions (Microsoft has patched the issue in later Windows 10 builds).

N/A

N/A

Listary 安全漏洞

Listary是一款革命性的 Windows 搜索实用程序 ，可以让普通用户和高级用户快速查找文件和启动应用程序。 Listary 存在安全漏洞，该漏洞源于攻击者可以创建一个 .pipeListary.listaryService 命名管道并等待特权用户在 Listary 安装的主机上打开会话。 Listary 将自动访问命名管道，攻击者将能够复制受害者的令牌来冒充他。此漏洞在某些 Windows 版本中有效（Microsoft 已在以后的 Windows 10 版本中修补了该问题）。

N/A

N/A