CVE-2017-2802

Dell Precision Optimizer contains a local privilege escalation in the PPO service (poaService.exe) via dll hijacking. The ati.dll loads atiadlxx.dll, which is not present in the installation directory; the loader searches directories on PATH for a matching dll, allowing an attacker with local acc...

Dell Precision Optimizer Local Privilege Escalation Vulnerability(CVE-2017-2802)

Summary An exploitable dll hijacking vulnerability exists in the poaService.exe service component of the Dell Precision Optimizer software version 3.5.5.0. A specifically named malicious dll file located in one of directories pointed to by the PATH environment variable will lead to privilege...