qq-tim-elevation

Tencent QQ/TIM のローカル権限昇格 影響を受ける製品: QQ 9.7.1.28940 9.7.8.29039 TIM 3.4.5.22071 3.4.7.22084 影響を受けるコンポーネント: QQProtect.exe 4.5.0.9424 TIM 3.4.5.22071 内 QQProtect.exe 4.5.0.9426 QQ 9.7.1.28940 内 QQProtectEngine.dll 4.5.0.9424 TIM 3.4.5.22071 内 QQProtectEngine.dll 4.5.0.9426 QQ 9.7.1.28940 内 1. 概要...

CVE-2020-24160

Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code...

CVE-2023-34312

In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers from inter-process communication, which leads to a write-what-where condition...

Tencent TIM windows version has dll hijacking vulnerability

TIM is a concise version of QQ Office, a cross-platform communication tool under Tencent that focuses on team office collaboration. A dll hijacking vulnerability exists in Tencent TIM windows version. Attackers can use the vulnerability to load malicious dll and execute malicious code...

CVE-2020-24160

Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code...

Code injection

Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code...

CVE-2020-24160

Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code...

CVE-2020-24160: Uncontrolled Search Path Element

Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code...

Tencent TIM pc client software suffers from a command execution vulnerability

TIM, QQ Office Simple Edition, is a cross-platform communication tool that focuses on teamwork. Tencent TIM pc client software has a command execution vulnerability, the software PC client can allow an attacker to inject executable DLL files into the client process to execute arbitrary functions...