Skip to content
OpenAdvisories
Unscored CVE-2019-13142 EUVD-2019-4674GHSA-98w8-8hm2-7f2j

The RzSurroundVADStreamingService (RzSurroundVADStreamingService.exe) in Razer Surround 1.1.63.0 runs as the SYSTEM user using an executabl…

Published Jul 9, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

The RzSurroundVADStreamingService (RzSurroundVADStreamingService.exe) in Razer Surround 1.1.63.0 runs as the SYSTEM user using an executable located in %PROGRAMDATA%\Razer\Synapse\Devices\Razer Surround\Driver\. The DACL on this folder allows any user to overwrite contents of files in this folder, resulting in Elevation of Privilege.

References