CVE-2009-5151 The stub component of Absolute Computrace Agent V70.785 executes code from a disk's inter-partition space without requiring a digital signature for that code, which allows attackers to execute code on...
MediumCVSS 6.7
EPSS 0.48%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The stub component of Absolute Computrace Agent V70.785 executes code from a disk's inter-partition space without requiring a digital signature for that code, which allows attackers to execute code on the BIOS. This allows a privileged local user to achieve persistent control of BIOS behavior, independent of later disk changes.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| absolute computrace agent | = 70.785 | No fix listed |
References
- www.coresecurity.com exploit technical-description third-party-advisory