KLA10246 LPE vulnerability in Lunascape

An untrusted path vulnerability was found in Lunascape. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via DLL hijacking.

Original advisories

Related products

Lunascape

CVE list

CVE-2011-0452 high

Solution

Update to latest version

Impacts

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

• Lunascape versions 6.4.2 and earlier