PT-2020-12199 · Tencent · Qqbrowser

Maciej Miszczyk · Published 2020-04-09 · Updated 2021-07-21 · CVE-2020-10551

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QQBrowser versions prior to 10.5.3870.400

Description The issue allows local attackers to escalate privileges to NT AUTHORITYSYSTEM by exploiting the fact that the TsService.exe file, installed by QQBrowser, is writable by anyone belonging to the NT AUTHORITYAuthenticated Users group. This group includes all local and remote users. The exploitation involves writing a malicious executable to the location of TsService.

Recommendations For QQBrowser versions prior to 10.5.3870.400, update to version 10.5.3870.400 or later to resolve the issue. As a temporary workaround, consider restricting write access to the TsService.exe file to prevent local attackers from exploiting this weakness.

Exploit

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2020-10551

Affected Products

Qqbrowser

References · 5

• 🔥 https://github.com/seqred-s-a/CVE-2020-10551 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-10551 · Security Note
• https://osv.dev/vulnerability/CVE-2020-10551 · Vendor Advisory
• https://seqred.pl/en/cve-2020-10551-privilege-escalation-in-qqbrowser · Note
• https://t.me/cvenotify/2610 · Telegram Post