DLL Hijacking Vulnerability in Catalyst Production Suite and Browse Suite by Catalyst
CVE-2019-19364

7.8HIGH

Key Information:

Vendor

Sony

Status
Catalyst Browse
Catalyst Production Suite
Vendor
CVE Published:
4 December 2019

What is CVE-2019-19364?

A vulnerability exists within the Catalyst Production Suite and Browse Suite installers, whereby a malicious user is able to execute DLL hijacking tactics. The installers fail to locate necessary DLL files within their expected directories, allowing attackers to exploit this oversight for privilege escalation when the installers are executed. This opens a potential entry point for unauthorized access within the system.

References

https://gist.github.com/Eli-Paz/482b514320009f3e76ea712cd...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.