漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Razer Synapse before 3.7.0228.022817 allows privilege escalation because it relies on %PROGRAMDATA%\Razer\Synapse3\Service\bin even if %PROGRAMDATA%\Razer has been created by any unprivileged user before Synapse is installed. The unprivileged user may have placed Trojan horse DLLs there.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Razer Synapse 3 代码问题漏洞
Vulnerability Description
Razer Synapse 3是美国Razer公司的一个应用软件。基于云的统一硬件配置工具。 Razer Synapse 3.7.0228.022817之前版本存在安全漏洞,该漏洞源于Razer Synapse 3.7.0228.022817之前版本允许权限升级,因为它依赖于%PROGRAMDATA%RazerSynapse3Servicein,在安装Synapse之前,任何非特权用户都创建了%PROGRAMDATA%Razer。攻击者利用该漏洞将Trojan horse DLLs放置在此处。
CVSS Information
N/A
Vulnerability Type
N/A