Lucene search

KrcertCVELIST:CVE-2020-7807

HistorySep 14, 2020 - 11:55 a.m.

CVE-2020-7807 DLL Hijacking Vulnerabilities During Installation of LG Electronics Software

2020-09-1411:55:29

CWE-353

krcert

www.cve.org

vulnerability

dll hijacking

lg electronics

installation

lgpcsuite_setup

ipsfullhd

lg_ultrawide

ultra_hd_driver setup

integrity check

impact

windows

x86

x64

CVSS3

5.6

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H

EPSS

0.001

Percentile

23.6%

JSON

A vulnerability that can hijack a DLL file that is loaded during products(LGPCSuite_Setup, IPSFULLHD, LG_ULTRAWIDE, ULTRA_HD_Driver Setup) installation into a DLL file that the hacker wants. Missing Support for Integrity Check vulnerability in COMPONENT of LG Electronics (LGPCSuite_Setup), (IPSFULLHD, LG_ULTRAWIDE, ULTRA_HD_Driver Setup) allows ATTACKER/ATTACK to cause IMPACT. This issue affects: LG Electronics; LGPCSuite_Setup : 1.0.0.3 on Windows(x86, x64); IPSFULLHD, LG_ULTRAWIDE, ULTRA_HD_Driver Setup : 1.0.0.9 on Windows(x86, x64).

CNA Affected

[
  {
    "platforms": [
      "Windows(x86, x64)"
    ],
    "product": "(LGPCSuite_Setup), (IPSFULLHD, LG_ULTRAWIDE, ULTRA_HD_Driver Setup)",
    "vendor": "LG Electronics",
    "versions": [
      {
        "status": "affected",
        "version": "IPSFULLHD, LG_ULTRAWIDE, ULTRA_HD_Driver Setup.exe 1.0.0.3"
      },
      {
        "status": "affected",
        "version": "LGPCSuite_Setup.exe 1.0.0.9"
      }
    ]
  }
]

References

lgsecurity.lge.com/

www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35587

CVSS3

5.6

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H

EPSS

0.001

Percentile

23.6%

JSON

Related for CVELIST:CVE-2020-7807