Описание
A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14687.
Ссылки
- Vendor Advisory
- ExploitThird Party Advisory
- Vendor Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:trendmicro:password_manager:5.0:*:*:*:*:*:*:*
EPSS
Процентиль: 60%
0.00394
Низкий
7.8 High
CVSS3
9.3 Critical
CVSS2
Дефекты
CWE-427
Связанные уязвимости
github
больше 3 лет назад
A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14687.
EPSS
Процентиль: 60%
0.00394
Низкий
7.8 High
CVSS3
9.3 Critical
CVSS2
Дефекты
CWE-427