CVE-2022-2313 — DLL high jacking in Trellix Agent

CVE-2022-2313

DLL high jacking in Trellix Agent PUBLISHED

Description (CNA)

A DLL hijacking vulnerability in the MA Smart Installer for Windows prior to 5.7.7, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL into the folder from where the Smart installer is being executed.

Affected (CNA)

Vendor / product	Versions
Trellix / Trellix Agent (TA)	affected unspecified before 5.7.7

CWE

No CWE identifiers supplied.

References

https://kcm.trellix.com/corporate/index?page=content&id=SB10385&actp=null&viewlocale=en_US&showDraft=false&platinum_status=false&locale=en_US

ADP enrichment

CVE

No English description supplied.

https://kcm.trellix.com/corporate/index?page=content&id=SB10385&actp=null&viewlocale=en_US&showDraft=false&platinum_status=false&locale=en_US