CVE-2019-12808

ALTOOLS update service 18.1 and earlier versions contains a local privilege escalation vulnerability due to insecure permission

published August 13, 2019

CVSS
—
EPSS
0%
Percentile
31.5
In the wild
Unconfirmed
What it is

ALTOOLS update service 18.1 and earlier versions contains a local privilege escalation vulnerability due to insecure permission. An attacker can overwrite an executable that is launched as a service to exploit this vulnerability and execute arbitrary code with system privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00386 · 31.5th percentile
Published
2019-08-13T19:35Z
EPSS history
Timeline
  • 13 AUG 19:35Z
    ALTOOLS update service 18.1 and earlier versions contains a local privilege escalation vulnerability due to insecure permission
    cvelistv5