CVE-2009-5152
MEDIUMAbsolute Computrace Agent - Race Condition via TaskResult.xml File
Title source: llmDescription
Absolute Computrace Agent, as distributed on certain Dell Inspiron systems through 2009, has a race condition with the Dell Client Configuration Utility (DCCU), which allows privileged local users to change Computrace Agent's activation/deactivation status to the factory default via a crafted TaskResult.xml file.
References (1)
Core 1
Core References
Exploit, Technical Description, Third Party Advisory x_refsource_misc
https://www.coresecurity.com/system/files/publications/2016/05/Paper-Deactivate-the-Rootkit-AOrtega-ASacco.pdf
Scores
CVSS v3
4.1
EPSS
0.0021
EPSS Percentile
10.9%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N
Details
CWE
CWE-362
Status
published
Products (1)
absolute/computrace_agent
Published
May 11, 2018
Tracked Since
Feb 18, 2026