Untrusted Search Path Vulnerability in Baidu Browser
CVE-2018-0692

7.8HIGH

Key Information:

Vendor

Baidu, Inc.

Status
Baidu Browser
Vendor
CVE Published:
15 November 2018

What is CVE-2018-0692?

The Baidu Browser contains an untrusted search path vulnerability that could allow attackers to execute malicious Trojan horse DLL files located in unspecified directories. This security flaw affects versions 43.23.1000.500 and earlier, exposing users to potential privilege escalation attacks that compromise system integrity.

Affected Version(s)

Baidu Browser Version 43.23.1000.500 and earlier

References

http://jvn.jp/en/jp/JVN77885134/index.html
third-party-advisoryx_refsource_JVN

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.