Race Condition in Absolute Computrace Agent on Dell Inspiron Systems

CVE-2009-5152

What is CVE-2009-5152?

The Absolute Computrace Agent, when included in specific 2009 Dell Inspiron systems, is susceptible to a race condition due to its interaction with the Dell Client Configuration Utility (DCCU). This vulnerability enables privileged local users to manipulate the activation or deactivation status of the Computrace Agent, reverting it to factory defaults by employing a specially crafted TaskResult.xml file. The potential for unauthorized access to system settings underscores the need for users to apply appropriate security measures.

References