漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
IObit Unlocker IRP_MJ_DEVICE_CONTROL IObitUnlocker.sys ZwTerminateProcess privileges management
Vulnerability Description
A vulnerability has been found in IObit Unlocker 1.3.0.12. This vulnerability affects the function ZwTerminateProcess in the library IObitUnlocker.sys of the component IRP_MJ_DEVICE_CONTROL Handler. The manipulation leads to improper privilege management. An attack has to be approached locally. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L
Vulnerability Type
特权管理不恰当
Vulnerability Title
IOBit unlocker 权限许可和访问控制问题漏洞
Vulnerability Description
IOBit unlocker是IOBit公司的一款文件解锁工具。 IOBit unlocker 1.3.0.12版本存在权限许可和访问控制问题漏洞,该漏洞源于IObitUnlocker.sys库中IRP_MJ_DEVICE_CONTROL Handler组件的ZwTerminateProcess函数存在不当的权限管理,可能导致本地攻击者进行权限提升。
CVSS Information
N/A
Vulnerability Type
N/A