Lucene search

[email protected]CVE-2018-10962

HistoryMay 10, 2018 - 2:29 a.m.

CVE-2018-10962

2018-05-1002:29:00

[email protected]

web.nvd.nist.gov

shanghai 2345 security guard

2345mpcsafe.exe

2345safetray.exe

2345speedup.exe

process protections

cve-2018-10962

nvd

security issue

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe allow local users to bypass intended process protections, and consequently terminate processes, because mouse_event is not properly considered.

Affected configurations

NVD

Node

2345_security_guard_project2345_security_guardMatch3.7.0

CPENameOperatorVersion
2345_security_guard_project:2345_security_guard2345 security guard project 2345 security guardeq3.7.0

CPE	Name	Operator	Version
2345_security_guard_project:2345_security_guard	2345 security guard project 2345 security guard	eq	3.7.0

References

github.com/rebol0x6c/2345_mouse_poc

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2018-10962

nvd1 prion1 cvelist1