CVE-2018-5202

SKCertService 2.5.5 and earlier contains a vulnerability that could allow remote attacker to execute arbitrary code

published December 21, 2018

CVSS
—
EPSS
2%
Percentile
74.7
In the wild
Unconfirmed
What it is

SKCertService 2.5.5 and earlier contains a vulnerability that could allow remote attacker to execute arbitrary code. This vulnerability exists due to the way .dll files are loaded by SKCertService. It allows an attacker to load a .dll of the attacker's choosing that could execute arbitrary code without the user's knowledge.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01548 · 74.7th percentile
Published
2018-12-21T16:00Z
EPSS history
Timeline
  • 21 DEC 16:00Z
    SKCertService 2.5.5 and earlier contains a vulnerability that could allow remote attacker to execute arbitrary code
    cvelistv5