Acer Care Center Named Pipe Vulnerability Leading to Local Denial-of-Service

A vulnerability exists in Acer Care Center where the ACCSvc service creates a Named Pipe with a weak Security Descriptor. This flaw allows an authenticated local user to connect to the pipe and send a specially crafted message, causing the service to crash with exit code 1067 (ERROR_PROCESS_ABORTED). Users are advised to update the software to the latest version to prevent this local service disruption.

Impact

Exploitation of this vulnerability causes the ACCSvc service to crash, leading to a local denial-of-service condition.

Remediation

Users are recommended to update Acer Care Center to the latest version.