First published: Wed Dec 18 2019(Updated: )
AsLdrSrv.exe in ASUS ATK Package before V1.0.0061 (for Windows 10 notebook PCs) could lead to unsigned code execution with no additional execution. The user must put an application at a particular path, with a particular file name.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
ASUS ATK Package | <1.0.0061 | |
Microsoft Windows 10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-19235 has a medium severity rating due to its potential for unsigned code execution.
To fix CVE-2019-19235, update the ASUS ATK Package to version 1.0.0061 or later.
Users with ASUS ATK Package versions prior to 1.0.0061 on Windows 10 notebook PCs are affected by CVE-2019-19235.
CVE-2019-19235 allows for unsigned code execution, which can lead to unauthorized application launch.
CVE-2019-19235 was disclosed in 2019 as part of ongoing security assessments.