CVE-2024-6871— G Data 安全漏洞

G DATA Total Security Incorrect Permission Assignment Local Privilege Escalation Vulnerability

G DATA Total Security Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of autostart tasks. The issue results from incorrect permissions set on folders. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-22629.

N/A

关键资源的不正确权限授予

G Data 安全漏洞

G Data是德国G Data公司的一款防病毒软件。 G Data存在安全漏洞，该漏洞源于自动启动任务处理中权限分配不当，可能导致本地攻击者提升权限并以SYSTEM身份执行任意代码。

N/A

N/A