Newsletter Archives

  • Dell patches SupportAssist, but other PC-Doctor software still vulnerable

    Posted on June 23, 2019 at 07:58 CDT by • Comment in the Forums

    Dell announced on June 21 that it has issued an emergency patch for the Dell SupportAssist software – which you’re probably running if you have a Dell computer and didn’t wipe out the pre-installed garbage.

    Specifically, the PC-Doctor component of SupportAssist has a vulnerability in the way it checks (or, er, doen’t check) the validity of certain DLLs on your computer. If somebody sticks a bad DLL on your machine, in a specific location and with a specific file name, PC-Doctor helpfully picks it up and runs it – with system-level privileges. SafeBreak Labs, which discovered and reported the bug, has a full description.

    Dell ain’t the only one. Apparently PC-Doctor Toolbox is also part of

    CORSAIR ONE Diagnostics
    CORSAIR Diagnostics
    Staples EasyTech Diagnostics
    Tobii I-Series Diagnostic Tool
    Tobii Dynavox Diagnostic Tool

    You may recall that Dell SupportAssist had a big security breach back in May, 2019. Beats me why anyone would continue to use crapware like it.

    Hardware, Other ,
DON'T MISS OUT!
Subscribe to the Free Newsletter
We promise not to spam you. Unsubscribe at any time.
Invalid email address

View the Forum

  • Recent Replies
  • My Replies
  • My Active Topics
  • New Posts in the Last day
  • Private Messages
  • Knowledge Base
  • How to use the Forums
  • All Forums

    • Recent Topics

    My Profile

    April 2025
    S M T W T F S
     12345
    6789101112
    13141516171819
    20212223242526
    27282930  

    Remembering Woody

     

    Want to Advertise in the free newsletter? How about a gift subscription in honor of a birthday? Send an email to sb@askwoody.com to ask how.

    Mastodon profile for DefConPatch
    Mastodon profile for AskWoody

     

    Home • About • FAQ • Posts & Privacy • Forums • My Account
    Register • Free Newsletter • Plus Membership • Gift Certificates • MS-DEFCON Alerts

    Copyright ©2004-2025 by AskWoody Tech LLC. All Rights Reserved.