CVE-2018-10425

Published: Apr 26, 2018Modified: Nov 21, 2024

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe allow local users to bypass intended process protections, and consequently terminate processes, because SetParent is not properly considered.

Affected (1)

Products: Hz Soft: Security Guard

Hz Soft

1 product

Security Guard

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Hz Soft Security Guard	Version 3.7.0

References (2)

https://github.com/rebol0x6c/2345poc

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/rebol0x6c/2345poc

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.