Checkpoint Endpoint Security Clients vulnerabilities

CVE-2019-8463 [HIGH] CWE-59 CVE-2019-8463: A denial of service vulnerability was reported in Check Point Endpoint Security Client for Windows b A denial of service vulnerability was reported in Check Point Endpoint Security Client for Windows before E82.10, that could allow service log file to be written to non-standard locations.

CVE-2019-8459 [CRITICAL] CWE-428 CVE-2019-8459: Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This can cause loading of a previously placed executable with a name similar to the parts of the path, instead of the intended one.

CVE-2019-8458 [MEDIUM] CWE-114 CVE-2019-8458: Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances