Security Advisory

CVE-2020-9331

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-10-23 04:49:06

Last updated 2024-08-04 10:26:16

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

CryptoPro CSP through 5.0.0.10004 on 32-bit platforms allows Local Privilege Escalation (by local users with the SeChangeNotifyPrivilege right) because user-mode input is mishandled during process creation. An attacker can write arbitrary data to an arbitrary location in the kernel's address space.

← Browse all CVEs View on cve.org ↗