mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-06 10:41:43 +00:00
18 lines
1.0 KiB
Markdown
18 lines
1.0 KiB
Markdown
|
### [CVE-2023-28140](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28140)
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
### Description
|
||
|
|
|
||
|
|
An Executable Hijacking condition exists in theQualys Cloud Agent for Windows platform in versions before 4.5.3.1. Attackersmay load a malicious copy of a Dependency Link Library (DLL) via a localattack vector instead of the DLL that the application was expecting, whenprocesses are running with escalated privileges. This vulnerabilityis bounded only to the time of uninstallation and can only be exploitedlocally.At the time of this disclosure, versions before 4.0 are classified as End ofLife.
|
||
|
|
|
||
|
|
### POC
|
||
|
|
|
||
|
|
#### Reference
|
||
|
|
- https://www.qualys.com/security-advisories/
|
||
|
|
|
||
|
|
#### Github
|
||
|
|
No PoCs found on GitHub currently.
|
||
|
|
|