漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Advanced Installer before 22.6 has an uncontrolled search path element local privilege escalation vulnerability. When running as SYSTEM in certain configurations, Advanced Installer looks in standard-user writable locations for non-existent binaries and executes them as SYSTEM. A low-privileged attacker can place a malicious binary in a targeted folder; when the installer is executed, the attacker achieves arbitrary SYSTEM code execution.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Advanced Installer 安全漏洞
Vulnerability Description
Advanced Installer是Advanced Installer开源的一款打包软件。 Advanced Installer 22.6之前版本存在安全漏洞,该漏洞源于搜索路径元素控制不当,可能导致本地权限提升。
CVSS Information
N/A
Vulnerability Type
N/A