CVE-2017-11652

Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the CrashReporter directory, which allows local users to gain privileges via a Trojan horse dbghelp.dll file.

Score

CVSS 3.1 8.4 High

Status

Modified - cve@mitre.org

Published

2017-08-18

Last modified

2024-08-05

Weaknesses

CWE-732

Affected products

• Synapse (Razer)

References

• http://packetstormsecurity.com/files/143516/Razer-Synapse-2.20-DLL-Hijacking.html