CVE-2019-6165

Published: Aug 19, 2019Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A DLL search path vulnerability was reported in PaperDisplay Hotkey Service version 1.2.0.8 that could allow privilege escalation. Lenovo has ended support for PaperDisplay Hotkey software as the Night light feature introduced in Windows 10 Build 1703 provides similar features.

Affected (2)

Products: Lenovo: Yoga 700 11isk Firmware, Yoga 700 14isk Firmware

2 products

Yoga 700 11isk Firmware

Yoga 700 14isk Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Yoga 700 11isk Firmware	All versions

Running on/with	Platform Versions
Lenovo Yoga 700 11isk	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Yoga 700 14isk Firmware	All versions

Running on/with	Platform Versions
Lenovo Yoga 700 14isk	All versions

Related CWEs

Untrusted Search Path

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

References (2)

https://support.lenovo.com/solutions/LEN-27569

Source: psirt@lenovo.com

Vendor Advisory

https://support.lenovo.com/solutions/LEN-27569

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.