Threats tagged 'ghsa-2j67-8pgp-xfx4'

A TOCTOU race condition in the Sandisk Dashboard installer allows a local authenticated standard user to replace a binary in a user-writable temporary directory between validation and execution. This leads to execution of an attacker-controlled binary with elevated administrative privileges. The vulnerability affects Sandisk Dashboard versions through 5.2.2.3.