ID:9464 - Exploit for Exposed dangerous method or function in MSI Afterburner - CVE-2019-16098

 
Main Vulnerability Database Exploits ID:9464 - Exploit for Exposed dangerous method or function in MSI Afterburner - CVE-2019-16098

ID:9464 - Exploit for Exposed dangerous method or function in MSI Afterburner - CVE-2019-16098

Published: December 27, 2023


Vulnerability identifier: #VU67995
Vulnerability risk: Low
CVE-ID: CVE-2019-16098
CWE-ID: CWE-749
Exploitation vector: Local access
Vulnerable software:
MSI Afterburner

Link to public exploit:


Vulnerability description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to presence of insecure methods within the Micro-Star MSI Afterburner driver (RTCore64.sys and RTCore32.sys files). A local user can execute arbitrary code with elevated privileges.

Remediation

Install updates from vendor's website.