Ammyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it easier for user-assisted remote attackers to bypass authentication by running a local program that extracts a field from the AA_v3.2.exe file.
References
Link | Resource |
---|---|
http://www.securityfocus.com/archive/1/530827 | Third Party Advisory VDB Entry |
Configurations
Information
Published : 2020-02-11 11:15
Updated : 2020-02-18 11:15
NVD link : CVE-2013-5582
Mitre link : CVE-2013-5582
JSON object : View
CWE
CWE-287
Improper Authentication
Products Affected
ammyy
- ammyy_admin