What the vulnerability does

01Description

ALTOOLS update service 18.1 and earlier versions contains a local privilege escalation vulnerability due to insecure permission. An attacker can overwrite an executable that is launched as a service to exploit this vulnerability and execute arbitrary code with system privileges.

Key dates

02Disclosure timeline

August 13, 2019 CVE published
August 4, 2024 Record updated