CVE-2020-10551 Privilege escalation in n/a
Local attackers can escalate privileges to SYSTEM by overwriting the writable TsService.exe file in QQBrowser.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-10551?
CVE-2020-10551 is a high-severity vulnerability in n/a, published on 9 Apr 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
QQBrowser before 10.5.3870.400 installs a Windows service TsService.exe. This file is writable by anyone belonging to the NT AUTHORITY\Authenticated Users group, which includes all local and remote users. This can be abused by local attackers to escalate privileges to NT AUTHORITY\SYSTEM by writing a malicious executable to the location of TsService.
Weakness: CWE-732
Which versions are affected by CVE-2020-10551?
It affects 1 product.
Products include Tencent Qqbrowser.
How do I fix CVE-2020-10551?
No fix has been published for CVE-2020-10551 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-10551 being exploited?
There is no known exploitation of CVE-2020-10551 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as GHSA-hqv3-p7gh-g339.