Описание
A maliciously crafted DLL file can be forced to install onto a non-default location, and attacker can overwrite parts of the product with malicious DLLs. These files may then have elevated privileges leading to a Privilege Escalation vulnerability.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 16.2.1.2016 (включая)
cpe:2.3:a:autodesk:desktop_connector:*:*:*:*:*:*:*:*
EPSS
Процентиль: 74%
0.008
Низкий
7.8 High
CVSS3
Дефекты
CWE-427
Связанные уязвимости
CVSS3: 7.8
github
около 2 лет назад
A maliciously crafted DLL file can be forced to install onto a non-default location, and attacker can overwrite parts of the product with malicious DLLs. These files may then have elevated privileges leading to a Privilege Escalation vulnerability.
EPSS
Процентиль: 74%
0.008
Низкий
7.8 High
CVSS3
Дефекты
CWE-427