DLL Hijacking Vulnerability in Acer Quick Access Software
CVE-2019-18670

7.8HIGH

Key Information:

Vendor

Acer

Status
Quick Access
Vendor
CVE Published:
17 December 2019

What is CVE-2019-18670?

A vulnerability exists in Acer Quick Access allowing a standard user to load arbitrary unsigned DLLs into a signed process running with SYSTEM privileges. This is made possible through an uncontrollable search path for certain DLLs, specifically nvapi.dll, atiadlxx.dll, and atiadlxy.dll. Attackers could exploit this by placing a malicious DLL in a location that the application would erroneously search, leading to unauthorized code execution.

References

https://drive.google.com/open?id=1r0cr-H_FMc8V4hwlqF1MAEh...
x_refsource_MISC
https://us.answers.acer.com/app/answers/detail/a_id/64586
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.