GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account.
References
Link | Resource |
---|---|
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24767 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
02 Aug 2023, 19:28
Type | Values Removed | Values Added |
---|---|---|
First Time |
Git For Windows Project
Git For Windows Project git For Windows |
|
CPE | cpe:2.3:a:git_for_windows_project:git_for_windows:*:*:*:*:*:*:*:* |
Information
Published : 2022-04-12 18:15
Updated : 2024-10-01 15:35
NVD link : CVE-2022-24767
Mitre link : CVE-2022-24767
CVE.ORG link : CVE-2022-24767
JSON object : View
Products Affected
microsoft
- visual_studio_2019
- visual_studio_2017
- visual_studio_2022
git_for_windows_project
- git_for_windows
CWE
CWE-427
Uncontrolled Search Path Element