Code injection

2021-09-2416:15:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.7%

JSON

Dr.Web Firewall 12.5.2.4160 on Windows incorrectly restricts applications signed by Dr.Web. A DLL for a custom payload within a legitimate binary (e.g., frwl_svc.exe) bypasses firewall filters.

CPENameOperatorVersion
security_spaceeq12.5.2.4160

CPE	Name	Operator	Version
	security_space	eq	12.5.2.4160

References

habr.com/ru/company/pm/blog/579328/

news.drweb.ru/show/?i=14180&lng=ru