CVEvulnerability

CVE-2009-5152

4.1 MEDIUM Published 2018-05-11 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2018-05-11
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.0 ([email protected])
4.1 MEDIUM — CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
1.9 LOW — AV:L/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-362

Description

Absolute Computrace Agent, as distributed on certain Dell Inspiron systems through 2009, has a race condition with the Dell Client Configuration Utility (DCCU), which allows privileged local users to change Computrace Agent's activation/deactivation status to the factory default via a crafted TaskResult.xml file.

Affected configurations

• absolute computrace agent

Related

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References