[CVE-2016-20085] Realtek High Definition Audio Driver 6.0.1.6730 contains an unquoted service path vulnerability that…

Descripción técnica

Realtek High Definition Audio Driver 6.0.1.6730 contains an unquoted service path vulnerability that allows local attackers to escalate privileges by placing a malicious executable in the service path. Attackers can insert an executable file in the unquoted path and restart the service to execute code with LocalSystem privileges.

Puntuación CVSS

Score: 7.8/10 — Severidad: HIGH — Estado NIST: Awaiting Analysis

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Debilidades (CWE)

CWE-428

Fuente oficial

Publicado en NIST NVD.