LiveCode v9.6.1 on Windows allows local, low-privileged users to gain privileges by creating a malicious "cmd.exe" in the folder of the vulnerable LiveCode application. If the application is using LiveCode's "shell()" function, it will attempt to search for "cmd.exe" in the folder of the current application and run the malicious "cmd.exe".
References
| Link | Resource |
|---|---|
| https://github.com/livecode/livecode/pull/7454 | Vendor Advisory |
| https://john-woodman.com/posts/LiveCode-Privilege-Escalation-Vulnerability/ | Exploit Third Party Advisory |
| https://quality.livecode.com/show_bug.cgi?id=22942 | Third Party Advisory |
| https://github.com/livecode/livecode/pull/7454 | Vendor Advisory |
| https://john-woodman.com/posts/LiveCode-Privilege-Escalation-Vulnerability/ | Exploit Third Party Advisory |
| https://quality.livecode.com/show_bug.cgi?id=22942 | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 05:20
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/livecode/livecode/pull/7454 - Vendor Advisory | |
| References | () https://john-woodman.com/posts/LiveCode-Privilege-Escalation-Vulnerability/ - Exploit, Third Party Advisory | |
| References | () https://quality.livecode.com/show_bug.cgi?id=22942 - Third Party Advisory |
Information
Published : 2020-10-08 21:15
Updated : 2024-11-21 05:20
NVD link : CVE-2020-26894
Mitre link : CVE-2020-26894
CVE.ORG link : CVE-2020-26894
JSON object : View
Products Affected
faulknermedia
- wildlife_issues_in_the_new_millennium
microsoft
- windows
CWE
CWE-427
Uncontrolled Search Path Element