Quick Access
Approved changes feed: RSS · Atom
cpe:2.3:a:acer:quick_access:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Acer (e31959cf-1baa-5b00-aee9-36f2e290d607) |
|---|---|
| Product | Quick Access (74259e4b-0faa-51be-87f1-7991e9c86453) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-18670 |
vulnerable | 2026-06-08 05:13:12.064467 |
Details available
In the Quick Access Service (QAAdminAgent.exe) in Acer Quick Access V2.01.3000 through 2.01.3027 and V3.00.3000 through V3.00.3008, a REGULAR user can load an arbitrary unsigned DLL into the signed service's process, which is running as NT AUTHORITY\SYSTEM. This is a DLL Hijacking vulnerability (including search order hijacking, which searches for the missing DLL in the PATH environment variable), which is caused by an uncontrolled search path element for nvapi.dll, atiadlxx.dll, or atiadlxy.dll.
Published: 2019-12-17T15:10:05.000Z
Updated: 2024-08-05T01:54:14.602Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.