CVE-2021-45975: High severity acer care center vulnerability
In ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading mechanism of Windows DLLs could allow a local attacker to perform a DLL hijacking attack. This vulnerability is due to incorrect handling of directory search paths at run time. An attacker could exploit this vulnerability by placing a malicious DLL file on the targeted system. This file will execute when the vulnerable application launches. A successful exploit could allow the attacker to execute arbitrary code on the targeted system with local administrator privileges.
Affected Software
Event History
Frequently Asked Questions
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2021-45975.
What is the severity of CVE-2021-45975?
The severity of CVE-2021-45975 is high with a CVSS score of 7.8.
What is the affected software?
The affected software is Acer Care Center version 4.x before 4.00.3038.
How does CVE-2021-45975 work?
CVE-2021-45975 is a DLL hijacking vulnerability in the loading mechanism of Windows DLLs in Acer Care Center. It allows a local attacker to perform a DLL hijacking attack by exploiting incorrect handling of directory search paths.
How can I fix CVE-2021-45975?
To fix CVE-2021-45975, you need to update Acer Care Center to version 4.00.3038 or later.