Vulnerability CVE-2020-12891
Published: 2022-02-04   Modified: 2022-02-05

Description:
AMD Radeon Software may be vulnerable to DLL Hijacking through path variable. An unprivileged user may be able to drop its malicious DLL file in any location which is in path environment variable.

Type:

CWE-427

 (Uncontrolled Search Path Element)

CVSS2 => (AV:L/AC:M/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.4/10
6.4/10
3.4/10
Exploit range
Attack complexity
Authentication
Local
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
AMD -> Radeon pro software 
AMD -> Radeon software 

 References:
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000
Copyright 2024, cxsecurity.com

 

Back to Top