Skip to content
OpenAdvisories
High · 7.8 CVE-2019-3742 EUVD-2019-13377GHSA-q66f-6m6f-mhqm

Dell/Alienware Digital Delivery versions prior to 3.5.2013 contain a privilege escalation vulnerability. A local non-privileged malicious u…

Published Aug 9, 2019 · Updated Sep 17, 2024 · Assigned by dell

Description

Dell/Alienware Digital Delivery versions prior to 3.5.2013 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a named pipe that performs binary deserialization via a process hollowing technique to inject malicous code to run an executable with elevated privileges.

Affected products

VendorProductAffectedFixed
Dell Dell Digital Delivery prior to 3.5.2013 —
Dell Alienware Digital Delivery prior to 3.5.2013 —

References