CVE-2022-2313

A DLL hijacking vulnerability in the MA Smart Installer for Windows prior to 5.7.7, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL into the folder from where the Smart installer is being executed.

Score

CVSS 3.1 8.2 High

Status

Modified - trellixpsirt@trellix.com

Published

2022-07-27

Last modified

2024-08-03

Weaknesses

CWE-427

Affected products

• Agent (Mcafee)
• Trellix Agent Ta (Trellix)

References

• https://kcm.trellix.com/corporate/index?page=content&id=SB10385&actp=null&viewlocale=en_US&showDraft=false&platinum_sta…