漏洞标题
在SanDisk Windows安全 installer中多个DLL搜索顺序劫持漏洞
漏洞描述信息
Windows上的SanDisk Security Installer多DLL搜索顺序劫持漏洞
CVSS信息
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
漏洞类别
对搜索路径元素未加控制
漏洞标题
Multiple DLL Search Order hijacking Vulnerabilities in SanDisk Security Installer for Windows
漏洞描述信息
Multiple DLL Search Order Hijack vulnerabilities were addressed in the SanDisk Security Installer for
Windows that could allow attackers with local access to execute arbitrary code by executing the installer
in the same folder as the malicious DLL. This can lead to the execution of arbitrary
code with the privileges of the vulnerable application or obtain a certain level of persistence
on the compromised host.
CVSS信息
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
漏洞类别
对搜索路径元素未加控制
漏洞标题
SanDisk Security Installer 安全漏洞
漏洞描述信息
Western Digital SanDisk Security Installer是美国西部数据（Western Digital）公司的一个安全安装程序。 SanDisk Security Installer存在安全漏洞，该漏洞源于存在多个DLL搜索顺序劫持漏洞，可能允许具有本地访问权限的攻击者通过执行安装程序来执行任意代码。
CVSS信息
N/A
漏洞类别
其他