Vulnerability in Sony Catalyst Browse
CVE-2019-19364
A weak malicious user can escalate its privilege whenever CatalystProductionSuite.2019.1.exe (version 1.1.0.21) and CatalystBrowseSuite.2019.1.exe (version 1.1.0.21) installers run. The vulnerability is in the form of DLL Hijacking. The installers try to load DLLs that don’t exist from its current directory; by doing so, an attacker can quickly escalate its privileges.
EPSS: 0.005 (38.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Sony Catalyst_browse
- Sony Catalyst_production_suite
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2019-19364?
- CVE-2019-19364 is a high-severity vulnerability in Sony Catalyst Browse, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2019-12-04.
- How severe is CVE-2019-19364?
- High severity. CVSS v3 base score is 7.8 out of 10.