DLL Hijacking Vulnerability in Shenzhen Tencent App for PC
CVE-2020-24162

7.8HIGH

Key Information:

Vendor

Tencent

Status
Tencent
Vendor
CVE Published:
3 September 2020

What is CVE-2020-24162?

The Shenzhen Tencent app version 5.8.2.5300 for PC platforms is susceptible to a DLL hijacking vulnerability, which allows attackers to load and execute malicious code. By exploiting this flaw, unauthorized users could compromise the application, potentially leading to the execution of harmful processes on the user's machine. This vulnerability emphasizes the importance of securing software environments against such attacks.

References

https://www.cnvd.org.cn/flaw/show/2105399
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.