CVEvulnerability

CVE-2019-19364

7.8 HIGH Published 2019-12-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-12-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-427

Description

A weak malicious user can escalate its privilege whenever CatalystProductionSuite.2019.1.exe (version 1.1.0.21) and CatalystBrowseSuite.2019.1.exe (version 1.1.0.21) installers run. The vulnerability is in the form of DLL Hijacking. The installers try to load DLLs that don’t exist from its current directory; by doing so, an attacker can quickly escalate its privileges.

Affected configurations

• sony catalyst browse (<= 2019.1) • sony catalyst production suite (<= 2019.1)

Related

Weakness · CWE (1)

  • CWE-427 Uncontrolled Search Path Element weakness

References