PT-2019-3052 · Microsoft · Windows
CVE-2019-1198
·
Publicado
2019-08-13
·
Atualizado
2024-05-29
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Windows (affected versions not specified)
Description
The issue is related to an elevation of privilege in SyncController.dll, allowing an attacker to run arbitrary code with elevated privileges. To exploit this, an attacker would need to run a specially crafted application. This vulnerability does not allow arbitrary code execution on its own but could be used in conjunction with other vulnerabilities, such as remote code execution, to take advantage of elevated privileges. The vulnerability is associated with inadequate access control in the SyncController.dll library of the Windows operating system.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Windows