CVE-2017-12653
HIGH360 Total Security < 9.0.0.1202 - Privilege Escalation via Shcore.dll Path Hijacking
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2017-12653. PoCs published by SecuriTeam.
AI-analyzed exploit summary This writeup describes a DLL hijacking vulnerability in 360 Total Security on Windows 7, where the software attempts to load Shcore.dll from the PATH, allowing privilege escalation if a malicious DLL is planted.
Description
360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via a Trojan horse Shcore.dll file in any directory in the PATH, as demonstrated by the C:\Python27 directory.
Exploits (1)
This writeup describes a DLL hijacking vulnerability in 360 Total Security on Windows 7, where the software attempts to load Shcore.dll from the PATH, allowing privilege escalation if a malicious DLL is planted.
References (1)
Scores
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H