CryptoPro CSP through 5.0.0.10004 on 32-bit platforms allows Local Privilege Escalation (by local users with the SeChangeNotifyPrivilege right) because user-mode input is mishandled during process creation. An attacker can write arbitrary data to an arbitrary location in the kernels address space.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Csp | Cryptopro | * | 5.0.0.10004 (excluding) |