Description
PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element.
References (8)
Core 8
Core References
Mailing List, Third Party Advisory mailing-list
x_refsource_fulldisc
http://seclists.org/fulldisclosure/2019/Jun/29
Third Party Advisory, VDB Entry x_refsource_misc
http://packetstormsecurity.com/files/153374/PC-Doctor-Toolbox-DLL-Hijacking.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/108880
Vendor Advisory x_refsource_confirm
http://www.pc-doctor.com/company/pr-articles/130-pc-doctor-responds-to-software-vulnerability-report
Third Party Advisory, US Government Resource, VDB Entry x_refsource_misc
https://www.us-cert.gov/ncas/current-activity/2019/06/21/Dell-Releases-Security-Advisory-Dell-SupportAssist
Third Party Advisory x_refsource_misc
https://safebreach.com/Press-Post/SafeBreach-Identifies-Serious-Vulnerability-In-PC-Doctor-Software
Mailing List, Third Party Advisory x_refsource_misc
https://seclists.org/fulldisclosure/2019/Jun/29
Scores
CVSS v3
7.8
EPSS
0.0069
EPSS Percentile
72.0%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-427
Status
published
Products (3)
dell/supportassist_for_business_pcs
2.0.1
dell/supportassist_for_home_pcs
3.2.2
pc-doctor/toolbox
< 7.3
Published
Jun 25, 2019
Tracked Since
Feb 18, 2026