CVE-2019-8458

2019-06-2016:44:33

CWE-114

checkpoint

www.cve.org

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

34.6%

JSON

Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances may cause the client to terminate.

CNA Affected

[
  {
    "product": "Check Point Endpoint Security Client for Windows, Anti-Malware blade",
    "vendor": "Check Point",
    "versions": [
      {
        "status": "affected",
        "version": "before E81.00"
      }
    ]
  }
]