Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w347-2542-wgjq

Опубликовано: 12 апр. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9

Описание

TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate files with crafted files when executing a file transfer. This is due to the fact that TightVNC runs in the backend as a high-privileges account.

TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate files with crafted files when executing a file transfer. This is due to the fact that TightVNC runs in the backend as a high-privileges account.

EPSS

Процентиль: 32%
0.00123
Низкий

9 Critical

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 9
ubuntu
почти 3 года назад

TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate files with crafted files when executing a file transfer. This is due to the fact that TightVNC runs in the backend as a high-privileges account.

CVSS3: 9
nvd
почти 3 года назад

TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate files with crafted files when executing a file transfer. This is due to the fact that TightVNC runs in the backend as a high-privileges account.

CVSS3: 9
debian
почти 3 года назад

TightVNC before v2.8.75 allows attackers to escalate privileges on the ...

CVSS3: 9
fstec
почти 3 года назад

Уязвимость системы удалённого доступа к рабочему столу компьютера TightVNC, связанная с ошибками при управлении привилегиями, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 32%
0.00123
Низкий

9 Critical

CVSS3

Дефекты

CWE-269