{
  "schema_version": "1.4.0",
  "id": "GHSA-wj79-qqhx-jqhr",
  "modified": "2022-02-03T00:00:40Z",
  "published": "2022-01-27T00:01:13Z",
  "aliases": [
    "CVE-2021-45975"
  ],
  "details": "In ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading mechanism of Windows DLLs could allow a local attacker to perform a DLL hijacking attack. This vulnerability is due to incorrect handling of directory search paths at run time. An attacker could exploit this vulnerability by placing a malicious DLL file on the targeted system. This file will execute when the vulnerable application launches. A successful exploit could allow the attacker to execute arbitrary code on the targeted system with local administrator privileges.",
  "severity": [],
  "affected": [],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-45975"
    },
    {
      "type": "WEB",
      "url": "https://acercsi.com"
    },
    {
      "type": "WEB",
      "url": "https://aptw.tf/2022/01/20/acer-care-center-privesc.html"
    },
    {
      "type": "WEB",
      "url": "https://community.acer.com/en/kb/articles/14757-acer-care-center-requires-an-update-to-resolve-a-security-vulnerability"
    }
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-426"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2022-01-26T15:15:00Z"
  }
}