PT-2019-16685 · Dell · Dell/Alienware Digital Delivery

Published 2019-08-09 · Updated 2023-03-03 · CVE-2019-3742

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell/Alienware Digital Delivery versions prior to 3.5.2013

Description The issue allows a local non-privileged malicious user to exploit a named pipe that performs binary deserialization via a process hollowing technique. This technique enables the injection of malicious code to run an executable with elevated privileges.

Recommendations For versions prior to 3.5.2013, update to version 3.5.2013 or later to resolve the issue.

Fix

Related Identifiers

CVE-2019-3742

Affected Products

Dell/Alienware Digital Delivery

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-3742 · Security Note
• https://osv.dev/vulnerability/CVE-2019-3742 · Vendor Advisory
• https://dell.com/support/article/SLN318085 · Vendor Advisory