CVE-2017-12653 – 360 Total Security - Local Privilege Escalation

https://notcve.org/view.php?id=CVE-2017-12653

360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via a Trojan horse Shcore.dll file in any directory in the PATH, as demonstrated by the C:\Python27 directory. 360 Total Security 9.0.0.1202 en versiones anteriores a la 2017-07-07 permite escalar privilegios empleando un archivo troyano Shcore.dll en cualquier directorio de la ruta, tal u como se demostró en el directorio C:\Python27. • https://www.exploit-db.com/exploits/44069 https://blogs.securiteam.com/index.php/archives/3314#more-3314 • CWE-427: Uncontrolled Search Path Element •