CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 6.8
CWE Name:  Permissions Privileges and Access Controls
Summary: in the f-secure installer in f-secure safe for windows before 17.6, f-secure internet security before 17.6, f-secure anti-virus before 17.6, f-secure client security standard and premium before 14.10, f-secure psb workstation security before 12.01, and f-secure computer protection standard and premium before 19.3, a local user can escalate their privileges through a dll hijacking attack against the installer. the installer writes the file rm.exe to c:\windows\temp and then executes it. the rm.exe process then attempts to load several dlls from its current directory. non-admin users are able to write to this folder, so an attacker can create a malicious c:\windows\temp\oleacc.dll file. when an admin runs the installer, rm.exe will execute the attacker's dll in an elevated security context.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-05-17
Last Modified Date: 2019-05-21
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Permissions Privileges and Access Controls.
user
CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 6.8
CWE Name:  Permissions Privileges and Access Controls
Summary: in the f-secure installer in f-secure safe for windows before 17.6, f-secure internet security before 17.6, f-secure anti-virus before 17.6, f-secure client security standard and premium before 14.10, f-secure psb workstation security before 12.01, and f-secure computer protection standard and premium before 19.3, a local user can escalate their privileges through a dll hijacking attack against the installer. the installer writes the file rm.exe to c:\windows\temp and then executes it. the rm.exe process then attempts to load several dlls from its current directory. non-admin users are able to write to this folder, so an attacker can create a malicious c:\windows\temp\oleacc.dll file. when an admin runs the installer, rm.exe will execute the attacker's dll in an elevated security context.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-05-17
Last Modified Date: 2019-05-21
assistant