PT-2019-13289
CVE-2019-13357
·
تاريخ النشر
2019-09-24
·
تاريخ التحديث
2019-09-24
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Total Defense Anti-virus version 9.0.0.773
Description
The issue allows local attackers to achieve SYSTEM-level code execution by hijacking the ccGUIFrm.dll when the caschelp.exe executable, which uses the untrusted search path C:, is run by the ccSchedulerSVC service.
Recommendations
For Total Defense Anti-virus version 9.0.0.773, consider restricting access to the
ccGUIFrm.dll until a patch is available to prevent code execution. Additionally, ensure the ccSchedulerSVC service is properly configured to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾