Beveiligingsadvies

CVE-2020-9331

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-10-23 04:49:06
Laatst bijgewerkt 2024-08-04 10:26:16
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

CryptoPro CSP through 5.0.0.10004 on 32-bit platforms allows Local Privilege Escalation (by local users with the SeChangeNotifyPrivilege right) because user-mode input is mishandled during process creation. An attacker can write arbitrary data to an arbitrary location in the kernel's address space.