In the version 12.1.0.1004 and below of 360 Total Security, when the main process of 360 Total Security calls GameChrome.exe, there exists a local privilege escalation vulnerability. An attacker who could exploit DLL hijacking to bypass the hips could execute arbitrary code on the Local system.
References
Link | Resource |
---|---|
https://security.360.cn/News/news/id/232 | Vendor Advisory |
Configurations
Information
Published : 2020-07-21 11:15
Updated : 2021-07-21 04:39
NVD link : CVE-2020-15723
Mitre link : CVE-2020-15723
JSON object : View
CWE
CWE-427
Uncontrolled Search Path Element
Products Affected
360totalsecurity
- 360_total_security