CVE-2023-32177— VIPRE Antivirus Plus DeleteHistoryFile Directory Traversal Local Privilege Escalation Vulnerability

VIPRE Antivirus Plus DeleteHistoryFile Directory Traversal Local Privilege Escalation Vulnerability

VIPRE Antivirus Plus DeleteHistoryFile Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Antivirus Plus. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DeleteHistoryFile method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. . Was ZDI-CAN-19395.

N/A

对路径名的限制不恰当(路径遍历)

VIPRE Antivirus 安全漏洞

VIPRE Antivirus是美国VIPRE公司的一款安全软件，可提供保护 PC 免受病毒感染和其他安全威胁所需的所有功能。 VIPRE Antivirus Plus 存在安全漏洞，该漏洞源于DeleteHistoryFile 方法中存在特定缺陷，允许本地攻击者权限提升。

N/A

N/A