PT-2018-16796
CVE-2018-5202
·
تاريخ النشر
2018-12-21
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SKCertService versions 2.5.5 and earlier
Description
The issue exists due to the way .dll files are loaded by SKCertService, allowing a remote attacker to execute arbitrary code. This is possible because an attacker can load a .dll of their choosing, which could execute arbitrary code without the user's knowledge.
Recommendations
For SKCertService versions 2.5.5 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾