Code injection

2020-04-0913:15:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.2%

JSON

QQBrowser before 10.5.3870.400 installs a Windows service TsService.exe. This file is writable by anyone belonging to the NT AUTHORITY\Authenticated Users group, which includes all local and remote users. This can be abused by local attackers to escalate privileges to NT AUTHORITY\SYSTEM by writing a malicious executable to the location of TsService.

CPENameOperatorVersion
qqbrowserlt10.5.3870.400

CPE	Name	Operator	Version
	qqbrowser	lt	10.5.3870.400

References

github.com/seqred-s-a/CVE-2020-10551

seqred.pl/en/cve-2020-10551-privilege-escalation-in-qqbrowser/