← CVE Intelligence

CVE-2019-12808

ESTSOFT / ALTOOLS Update Service PUBLISHED

Description (CNA)

ALTOOLS update service 18.1 and earlier versions contains a local privilege escalation vulnerability due to insecure permission. An attacker can overwrite an executable that is launched as a service to exploit this vulnerability and execute arbitrary code with system privileges.

Affected (CNA)

Vendor / productVersions
ESTSOFT / ALTOOLS Update Serviceaffected 18.1

CWE

CWE-264

References

ADP enrichment

CVE

No English description supplied.