Falhas do tipo CWE-428

356 resultados

Caminho de busca sem aspas ou elemento desprotegido

Ocorre quando um programa busca executar um arquivo ou carregar uma biblioteca sem aspas no caminho, ou sem validar o local exato. Um atacante coloca um arquivo malicioso em um diretório anterior da busca, forçando o programa a executar o arquivo dele em vez do legítimo.

Exemplo

Um instalador Windows tenta executar 'C:\Program Files\Aplicacao\bin\tool.exe' sem aspas. Se o caminho contém espaço e o programa busca executáveis também em diretórios do sistema, um atacante cria 'C:\Program.exe' que será carregado antes.

Como mitigar

Use caminhos absolutos com aspas duplas em toda chamada de programa ou biblioteca (ex: '"C:\\Caminho Completo\\arquivo.exe"'). Valide e normalize todos os caminhos dinâmicos antes de usar, rejeitando qualquer que não corresponda exatamente ao esperado.

CVE-2021-47861HIGHEvent Log Explorer 4.9.3 - 'ElodeaEventCollectorService' Unquoted Service PathEPSS 0.1%CVE-2020-36958HIGHKite 1.2020.1119.0 - 'KiteService' Unquoted Service PathEPSS 0.1%CVE-2021-47874HIGHVFS for Git 1.0.21014.1 - 'GVFS.Service' Unquoted Service PathEPSS 0.1%CVE-2021-47887HIGHPrint Job Accounting 4.4.10 - 'OkiJaSvc' Unquoted Service PathEPSS 0.1%CVE-2020-36959HIGHIDT PC Audio 1.0.6499.0 - 'STacSV' Unquoted Service PathEPSS 0.1%CVE-2021-47868HIGHWIN-PACK PRO 4.8 - 'WPCommandFileService' Unquoted Service PathEPSS 0.1%CVE-2021-47863HIGHMacPaw Encrypto 1.0.1 - 'Encrypto Service' Unquoted Service PathEPSS 0.1%CVE-2021-47859HIGHActivIdentity 8.2 - 'ac.sharedstore' Unquoted Service PathEPSS 0.1%CVE-2021-47880HIGHRealtek Wireless LAN Utility 700.1631 - 'Realtek11nSU' Unquoted Service PathEPSS 0.1%CVE-2021-47879HIGHeBeam Interactive Suite 3.6 - 'eBeam Stylus Driver' Unquoted Service PathEPSS 0.1%CVE-2022-50688HIGHCobian Backup Gravity 11.2.0.582 Unquoted Service Path Privilege EscalationEPSS 0.1%CVE-2022-4429MEDIUMAvira Security for Windows - Denial of ServiceEPSS 0.1%CVE-2020-36903HIGHSelea CarPlateServer 4.0.1.6 Local Privilege Escalation via Unquoted Service PathEPSS 0.1%CVE-2025-9043MEDIUMThe service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows an attacker with Admin privileges to exploitEPSS 0.1%CVE-2023-54338HIGHTftpd32_SE 4.60 - 'Tftpd32_svc' Unquoted Service PathEPSS 0.1%CVE-2026-24466HIGHProducts provided by Oki Electric Industry Co., Ltd. and its OEM products (Ricoh Co., Ltd., Murata Machinery, Ltd.) register Windows serviceEPSS 0.1%CVE-2026-8864HIGHHP Fan Control App – Potential Escalation of PrivilegeEPSS 0.1%CVE-2020-37059HIGHPopcorn Time 6.2 - 'Update service' Unquoted Service PathEPSS 0.1%CVE-2023-53912HIGHUSB Flash Drives Control 4.1.0.0 Unquoted Service Path Privilege EscalationEPSS 0.1%CVE-2017-20218HIGHServiio PRO 1.8 Local Privilege Escalation via Unquoted PathEPSS 0.1%