CVE-2021-46443

 

Published at: - 01-04-2022 01:15

Last modified: - 01-04-2022 02:01

Total changes: - 1

Description

Spoofer 1.4.6 suffers from unquoted service paths vulnerability. An attacker as a low privileged local user can hijack the execution flow of the application to escalate privileges by inserting a malicious executable in a higher level directory with the vulnerable path.

Common Vulnerability Scoring System (CVSS)

-

 

 

Reference

• http://spoofer.com
• https://packetstormsecurity.com/files/166553/Spoofer-1.4.6-Privilege-Escalation-Unquoted-Service-Path.html

 

Keywords

NVD

 

CVE-2021-46443

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures