CVE-2016-3958 Privilege escalation on Windows via malicious DLL in syscall
HighCVSS 7.8
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| stdlib(Go) | < 1.5.4 | 1.5.4 |
| stdlib(Go) | >= 1.6.0-0, < 1.6.1 | 1.6.1 |
| golang go | >= 1.5, < 1.5.4 | 1.5.4 |
| golang go | >= 1.6, < 1.6.1 | 1.6.1 |
| golang go | = 1.6 | No fix listed |
References
- go.dev patch
- go.googlesource.com patch
- go.dev issue-tracking
- groups.google.com
- [oss-security] 20160405 CVE request - Go - DLL loading, Big int mailing-list third-party-advisory
- [oss-security] 20160405 Re: CVE request - Go - DLL loading, Big int mailing-list third-party-advisory
- github.com third-party-advisory
- go-review.googlesource.com vendor-advisory
- [golang-announce] 20160412 [security] Go 1.6.1 and 1.5.4 are released mailing-list