PT-2024-21928 · Unknown · Superantispyware Professional

M. Akil Gündoğan · Published 2024-04-29 · Updated 2024-08-22 · CVE-2024-27518

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SUPERAntiSpyware Professional X versions 10.0.1262 through 10.0.1264

Description The issue allows unprivileged attackers to escalate privileges via a restore of a crafted DLL file into the C:Program FilesSUPERAntiSpyware folder.

Recommendations For versions 10.0.1262 and 10.0.1264, consider restricting access to the C:Program FilesSUPERAntiSpyware folder to prevent the restoration of crafted DLL files until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2024-27518

Affected Products

Superantispyware Professional

References · 5

• 🔥 https://github.com/secunnix/CVE-2024-27518 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-27518 · Security Note
• https://t.me/cvenotify/78482 · Telegram Post
• https://youtube.com/watch?v=FM5XlZPdvdo · Note
• https://superantispyware.com · Note