{"containers": {"cna": {"affected": [{"product": "360 Total Security", "vendor": "n/a", "versions": [{"status": "affected", "version": "12.1.0.1004"}]}], "descriptions": [{"lang": "en", "value": "In the version 12.1.0.1004 and below of 360 Total Security, when the main process of 360 Total Security calls GameChrome.exe, there exists a local privilege escalation vulnerability. An attacker who could exploit DLL hijacking to bypass the hips could execute arbitrary code on the Local system."}], "problemTypes": [{"descriptions": [{"description": "local privilege escalation vulnerability", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-07-21T17:04:50", "orgId": "40f8fa2f-7875-43d0-a30e-e901a5537754", "shortName": "360ST"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://security.360.cn/News/news/id/232"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@360.cn", "ID": "CVE-2020-15723", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "360 Total Security", "version": {"version_data": [{"version_value": "12.1.0.1004"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "In the version 12.1.0.1004 and below of 360 Total Security, when the main process of 360 Total Security calls GameChrome.exe, there exists a local privilege escalation vulnerability. An attacker who could exploit DLL hijacking to bypass the hips could execute arbitrary code on the Local system."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "local privilege escalation vulnerability"}]}]}, "references": {"reference_data": [{"name": "https://security.360.cn/News/news/id/232", "refsource": "MISC", "url": "https://security.360.cn/News/news/id/232"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T13:22:30.687Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://security.360.cn/News/news/id/232"}]}]}, "cveMetadata": {"assignerOrgId": "40f8fa2f-7875-43d0-a30e-e901a5537754", "assignerShortName": "360ST", "cveId": "CVE-2020-15723", "datePublished": "2020-07-21T17:04:50", "dateReserved": "2020-07-14T00:00:00", "dateUpdated": "2024-08-04T13:22:30.687Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:360totalsecurity:360_total_security:*:*:*:*:*:*:*:*", "matchCriteriaId": "D275F40A-818B-4D1A-955A-7A9CBB49CDA0", "versionEndIncluding": "12.1.0.1004", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "In the version 12.1.0.1004 and below of 360 Total Security, when the main process of 360 Total Security calls GameChrome.exe, there exists a local privilege escalation vulnerability. An attacker who could exploit DLL hijacking to bypass the hips could execute arbitrary code on the Local system."}, {"lang": "es", "value": "En 360 ??Total Security versi\u00f3n 12.1.0.1004 y por debajo, cuando el proceso principal de 360 ??Total Security llama al archivo GameChrome.exe, se presenta una vulnerabilidad de escalada de privilegios local. Un atacante que podr\u00eda explotar el secuestro de DLL para omitir los HIPS podr\u00eda ejecutar c\u00f3digo arbitrario en el sistema local"}], "id": "CVE-2020-15723", "lastModified": "2024-11-21T05:06:06.507", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 6.9, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.4, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-07-21T18:15:20.067", "references": [{"source": "security@360.cn", "tags": ["Vendor Advisory"], "url": "https://security.360.cn/News/news/id/232"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://security.360.cn/News/news/id/232"}], "sourceIdentifier": "security@360.cn", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-427"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}