Corsair---DLL-Planting-CVE-2023-38822

Corsair---DLL-Planting-CVE-2023-38822 Plantación de DLL en Corsair iCUE v.5.3.102 CVE-2023-38822 Descubridor: Idan Malihi Descripción Un problema en Corsair iCUE v.5.3.102 permite a un atacante local ejecutar código arbitrario a través de los componentes MPDC.dll, CRYPTSP.dll, dcomp.dll,...

iCUE_DllHijack_LPE-CVE-2024-22002

Software y versión vulnerable Enlace de descarga del software: CORSAIR iCUE v5.9.105 with iCUE Murals Descripción Se ha identificado una vulnerabilidad de DLL Hijacking en iCUE v5.9.105. Esta vulnerabilidad ocurre durante el proceso de actualización, gestionado por el servicio "iCUEUpdateService"...

EUVD-2020-29656

Malware in sbrugna...

CVE-2024-22002

CORSAIR iCUE 5.9.105 with iCUE Murals on Windows allows unprivileged users to insert DLL files in the cuepkg-1.2.6 subdirectory of the installation directory...

The vulnerability of the iCUEUpdateService service in the CORSAIR iCUE management system allows a hacker to elevate their privileges.

The vulnerability of the iCUEUpdateService service in the CORSAIR iCUE management system is related to insufficient protection of service data due to the loading of dynamic libraries MSASN1.dll, NTASN1.dll, and profapi.dll into the \cuepkg-1.2.6 directory. Exploiting this vulnerability can allow...

CVE-2024-22002

CORSAIR iCUE 5.9.105 with iCUE Murals on Windows allows unprivileged users to insert DLL files in the cuepkg-1.2.6 subdirectory of the installation directory...

CVE-2024-22002

CORSAIR iCUE 5.9.105 with iCUE Murals on Windows allows unprivileged users to insert DLL files in the cuepkg-1.2.6 subdirectory of the installation directory...

CVE-2024-22002

CORSAIR iCUE v5.9.105 with iCUE Murals on Windows is vulnerable to a DLL Hijacking flaw during the update process. The iCUEUpdateService spawns cuepkg.exe with NT AUTHORITYlingSYSTEM privileges, which then searches for dynamic libraries in the \cuepkg-1.2.6 subdirectory. Because unprivileged use...

CVE-2024-22002

CORSAIR iCUE 5.9.105 with iCUE Murals on Windows allows unprivileged users to insert DLL files in the cuepkg-1.2.6 subdirectory of the installation directory...

CVE-2024-22002: Exposure of Sensitive Information to an Unauthorized Actor

CORSAIR iCUE 5.9.105 with iCUE Murals on Windows allows unprivileged users to insert DLL files in the cuepkg-1.2.6 subdirectory of the installation directory...

CORSAIR iCUE Security Vulnerabilities

CORSAIR iCUE is a PC monitoring and RGB lighting control software from CORSAIR. It allows you to control and customize compatible RGB lighting devices, fans, keyboards, mice, headphones, and more. A security vulnerability exists in CORSAIR iCUE version 5.9.105 that originates from allowing an...

PT-2024-6108 · Microsoft +1 · Ntasn1.Dll +3

Name of the Vulnerable Software and Affected Versions: CORSAIR iCUE version 5.9.105 Description: The issue is related to insufficient protection of service data due to the loading of dynamic libraries, including MSASN1.dll, NTASN1.dll, and profapi.dll, in the cuepkg-1.2.6 subdirectory of the...

CVE-2020-8808

The CorsairLLAccess64.sys and CorsairLLAccess32.sys drivers in CORSAIR iCUE before 3.25.60 allow local non-privileged users including low-integrity level processes to read and write to arbitrary physical memory locations, and consequently gain NT AUTHORITY\SYSTEM privileges, via a function call...

Memory corruption

The CorsairLLAccess64.sys and CorsairLLAccess32.sys drivers in CORSAIR iCUE before 3.25.60 allow local non-privileged users including low-integrity level processes to read and write to arbitrary physical memory locations, and consequently gain NT AUTHORITY\SYSTEM privileges, via a function call...

CVE-2020-8808

The CorsairLLAccess64.sys and CorsairLLAccess32.sys drivers in CORSAIR iCUE before 3.25.60 allow local non-privileged users including low-integrity level processes to read and write to arbitrary physical memory locations, and consequently gain NT AUTHORITY\SYSTEM privileges, via a function call...

CVE-2020-8808

The CorsairLLAccess64.sys and CorsairLLAccess32.sys drivers in CORSAIR iCUE before 3.25.60 allow local non-privileged users including low-integrity level processes to read and write to arbitrary physical memory locations, and consequently gain NT AUTHORITY\SYSTEM privileges, via a function call...

PT-2020-20294

Name of the Vulnerable Software and Affected Versions CORSAIR iCUE versions prior to 3.25.60 Description The issue allows local non-privileged users to read and write to arbitrary physical memory locations, and consequently gain NT AUTHORITYSYSTEM privileges, via a function call such as...

CVE-2020-8808: Undefined Security Weakness

The CorsairLLAccess64.sys and CorsairLLAccess32.sys drivers in CORSAIR iCUE before 3.25.60 allow local non-privileged users including low-integrity level processes to read and write to arbitrary physical memory locations, and consequently gain NT AUTHORITY\SYSTEM privileges, via a function call...