HP Support Assistant CVE-2018-5927 DLL Loading Local Code Execution Vulnerability

Bugtraq ID:	107659
Class:	Input Validation Error
CVE:	CVE-2018-5927
Remote:	No
Local:	Yes
Published:	Feb 21 2019 12:00AM
Updated:	Feb 21 2019 12:00AM
Credit:	Marius Gabriel Mihai.
Vulnerable:	HP Support Assistant 8.1.52.1 HP Support Assistant 8.1.40.3
Not Vulnerable:	HP Support Assistant 8.7.50.3

HP Support Assistant CVE-2018-5927 DLL Loading Local Code Execution Vulnerability

HP Support Assistant is prone to a local arbitrary code-execution vulnerability.

An attacker can leverage this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in a denial of service condition.

HP Support Assistant versions prior to 8.7.50.3 are vulnerable.

HP Support Assistant CVE-2018-5927 DLL Loading Local Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP Support Assistant CVE-2018-5927 DLL Loading Local Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

HP Support Assistant CVE-2018-5927 DLL Loading Local Code Execution Vulnerability

References:

• HP Home Page (HP)
  
• HP Support Assistant (HP)
  
• HPSBGN03605 rev.1 - HP Support Assistant DLL Loading Vulnerability (HP)