PT-2019-17996 · Microsoft+1 · Windows 10+1

Published 2019-08-19 · Updated 2023-02-02 · CVE-2019-6165

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PaperDisplay Hotkey Service version 1.2.0.8

Description A DLL search path issue was reported that could allow privilege escalation. The software's functionality is superseded by the Night light feature in Windows 10 Build 1703 and later.

Recommendations For PaperDisplay Hotkey Service version 1.2.0.8, consider uninstalling the software as Lenovo has ended its support and Windows 10 Build 1703 and later provide similar functionality through the Night light feature.

Fix

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2019-6165

Affected Products

Paperdisplay Hotkey Service

Windows 10

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2019-6165 · Security Note
• https://support.lenovo.com/solutions/LEN-27569 · Vendor Advisory