CNNVD-202510-1342 Information
Oct 09, 2025
cve
CNNVD ID
CNNVD-202510-1342
Related CVE
- CNNVD Published: 2025-10-09
Description (Chinese)
Lavasoft Web Companion是加拿大Lavasoft公司的一个防病毒程序。 Lavasoft Web Companion 8.9.0.1091版本至12.1.3.1037版本存在安全漏洞，该漏洞源于DCIService.exe服务存在未加引号的服务路径漏洞，可能导致执行任意代码。
Description (English)
Lavasoft Web Companion is an anti-virus programme of the Canadian company Lavasoft. There is a security loophole in the Lavassoft Web Compañon versions 8.9.0.1091 to 12.1.3.1037, which stems from the lack of quotation marks on service path of the DCISerview.exe service, which may lead to the implementation of arbitrary codes.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Lavasoft
Published
2025-10-09
Last Modified
2026-02-24
References
https://gist.github.com/T4rantell/cd73592950c4ac700b40cc8e8e36494d
Patch
https://www.webcompanion.com/en/
Share on: