Threats tagged 'ghsa-3922-7ccf-5hwx'

The PFI plugin framework has a vulnerability where it deploys DLLs from a signed plugin package but fails to verify the signature of all archive entries. An unauthenticated local attacker can replace an unsigned DLL outside the signed prefix in the archive, which passes signature verification and overwrites a legitimate signed assembly. This leads to the plugin loader instantiating attacker-supplied code without further integrity checks, resulting in full system compromise.