CVE-2019-8458: check point check point endpoint security client for windows, anti-malware blade Process Control

Vulnerability summary

CVE-2019-8458 is a medium (CVSS 4.4) Process Control vulnerability in check point check point endpoint security client for windows, anti-malware blade. EPSS estimates a 0.95% chance of exploitation in the next 30 days, higher than 60.7% of scored vulnerabilities.

Timeline

1. 20-06-2019
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances may cause the client to terminate.

• CWE-114Process ControlExecuting commands or loading libraries from an untrusted source or in an untrusted environment can cause an application to execute malicious commands (and payloads) on behalf of an attacker.