VYPR

Heimdal

by Heimdalsecurity

CVEs (2)

  • CVE-2018-5349HigMar 22, 2018
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been found in Heimdal PRO v2.2.190, but it is most likely also present in Heimdal FREE and Heimdal CORP. Faulty permissions on the directory "C:\ProgramData\Heimdal Security\Heimdal Agent" allow BUILTIN\Users to write new files to the directory. On startup,…

  • CVE-2018-5731HigMar 22, 2018
    risk 0.46cvss 7.0epss 0.00

    An issue was discovered in Heimdal PRO 2.2.190. As part of the scanning feature, a process called md.hs writes an executable called CS1.tmp to C:\windows\TEMP. Afterwards the executable is run. It is possible for an attacker to create the file first, let md.hs overwrite it, and…