Threats tagged 'ghsa-4vm6-5mqx-h27m'

A vulnerability exists in ABP versions 2.0 through 2.0.7.9050 and AES versions 1.0 through 1.0.6.8290 where if the service is installed in a directory writable by non-administrative users, an attacker can replace or plant a malicious DLL. When the service restarts, it loads and executes the malicious DLL with LocalSystem privileges, leading to unauthorized code execution with elevated privileges.