360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via a Trojan horse Shcore.dll file in any directory in the PATH, as demonstrated by the C:\Python27 directory.
References
Link | Resource |
---|---|
https://blogs.securiteam.com/index.php/archives/3314#more-3314 | Third Party Advisory |
Configurations
Information
Published : 2017-08-07 11:29
Updated : 2019-10-02 17:03
NVD link : CVE-2017-12653
Mitre link : CVE-2017-12653
JSON object : View
CWE
CWE-427
Uncontrolled Search Path Element
Products Affected
360totalsecurity
- 360_total_security