Skip to content
OpenAdvisories
High · 8.2 CVE-2022-2313 EUVD-2022-34583GHSA-359g-8g36-v6qg

DLL high jacking in Trellix Agent

Published Jul 27, 2022 · Updated Aug 3, 2024 · Assigned by trellix

Description

A DLL hijacking vulnerability in the MA Smart Installer for Windows prior to 5.7.7, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL into the folder from where the Smart installer is being executed.

Affected products

VendorProductAffectedFixed
Trellix Trellix Agent (TA) unspecified – < 5.7.7 5.7.7

References