ID
VAR-201305-0370
TITLE
Fujitsu Lifebook A512 Multiple Search Paths Handle Local Privilege Escalation Vulnerabilities
Trust: 0.6
DESCRIPTION
The Fujitsu Lifebook A512 is a notebook device. Fujitsu Lifebook A512 multiple pre-installers use unquoted search paths in UninstallString, allowing an attacker to exploit a vulnerability to build a malicious file and name it \"Program.exe\" in the system root directory, which can be high at system startup Permission to execute. These programs include Norton Internet Security, FJ Camera, Management Engine Driver for Intel and OpenCL SDK. Local attackers can exploit the vulnerability to escalate permissions
Trust: 0.72
IOT TAXONOMY
| category: | ['ICS', 'Network device'] | sub_category: | - | Trust: 0.6 |
| category: | ['ICS'] | sub_category: | - | Trust: 0.2 |
AFFECTED PRODUCTS
| vendor: | fujitsu | model: | lifebook a512 | scope: | - | version: | - | Trust: 0.6 |
| vendor: | fujitsu | model: | lifebook a512 | scope: | eq | version: | * | Trust: 0.2 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
TYPE
Permission permission and access control
Trust: 0.2
EXTERNAL IDS
| db: | CNVD | id: | CNVD-2013-05298 | Trust: 0.8 |
| db: | IVD | id: | 2D07743A-1F25-11E6-ABEF-000C29C66E3D | Trust: 0.2 |
REFERENCES
| url: | http://seclists.org/fulldisclosure/2013/may/14 | Trust: 0.6 |
SOURCES
| db: | IVD | id: | 2d07743a-1f25-11e6-abef-000c29c66e3d |
| db: | CNVD | id: | CNVD-2013-05298 |
LAST UPDATE DATE
2022-05-17T02:09:06.832000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2013-05298 | date: | 2013-05-14T00:00:00 |
SOURCES RELEASE DATE
| db: | IVD | id: | 2d07743a-1f25-11e6-abef-000c29c66e3d | date: | 2013-05-15T00:00:00 |
| db: | CNVD | id: | CNVD-2013-05298 | date: | 2013-05-14T00:00:00 |