CVE-2018-5731

An issue was discovered in Heimdal PRO 2.2.190. As part of the scanning feature, a process called md.hs writes an executable called CS1.tmp to C:\windows\TEMP. Afterwards the executable is run. It is possible for an attacker to create the file first, let md.hs overwrite it, and then rewrite the...

CVE-2018-5731

CVE-2018-5731 affects Heimdal PRO 2.2.190. The vulnerability occurs during the scanning feature: a process (md.hs) writes an executable (CS1.tmp) to C:\windows\TEMP and then executes it. An attacker can ensure the file is created first, let md.hs overwrite it, and rewrite it in the window between...