EUVD-2021-24387

Malware in sbrugna...

CVE-2021-37909

WriteRegistry function in TSSServiSign component does not filter and verify users’ input, remote attackers can rewrite to the registry without permissions thus perform hijack attacks to execute arbitrary code...

CVE-2021-37909

WriteRegistry function in TSSServiSign component does not filter and verify users’ input, remote attackers can rewrite to the registry without permissions thus perform hijack attacks to execute arbitrary code...

Code injection

WriteRegistry function in TSSServiSign component does not filter and verify users’ input, remote attackers can rewrite to the registry without permissions thus perform hijack attacks to execute arbitrary code...

CVE-2021-37909

CVE-2021-37909 affects TSSServiSignAdapter (Windows). The issue is an input validation flaw in WriteRegistry within the TSSServiSign component, where user input is not filtered/verified, enabling a remote attacker to rewrite the registry without permissions and perform hijack attacks to execute a...