Описание
Untrusted search path vulnerability in Microsoft Windows Internet Communication Settings on Windows XP SP3 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as an ISP file.
Комментарий
Per: http://cwe.mitre.org/data/definitions/426.html
'CWE-426 - 'Untrusted Search Path Vulnerability'
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
EPSS
Процентиль: 91%
0.07297
Низкий
9.3 Critical
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 3 лет назад
Untrusted search path vulnerability in Microsoft Windows Internet Communication Settings on Windows XP SP3 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as an ISP file.
EPSS
Процентиль: 91%
0.07297
Низкий
9.3 Critical
CVSS2
Дефекты
NVD-CWE-Other