VIPRE Antivirus Plus TelFileTransfer Link Following Local Privilege Escalation Vulnerability

VIPRE Antivirus Plus TelFileTransfer Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Antivirus Plus. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the TelFileTransfer method. By creating a symbolic link, an attacker can abuse the method to delete arbitrary files. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. . Was ZDI-CAN-19396.

N/A

在文件访问前对链接解析不恰当(链接跟随)

VIPRE Antivirus 安全漏洞

VIPRE Antivirus是美国VIPRE公司的一款安全软件，可提供保护 PC 免受病毒感染和其他安全威胁所需的所有功能。 VIPRE Antivirus Plus 存在安全漏洞，该漏洞源于TelFileTransfer 方法中存在特定缺陷，允许本地攻击者权限提升。

N/A

N/A