CVE-2014-8494 in ESTsoft ALUpdate
Summary
ESTsoft ALUpdate 8.5.1.0.0 uses weak permissions (Users: Full Control) for the (1) AlUpdate folder and (2) AlUpdate.exe, which allows local users to gain privileges via a Trojan horse file.
Reservation
10/27/2014
Disclosure
11/03/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 72783 | ESTsoft ALUpdate Privileges AlUpdate.exe access control | 264 | Not defined | Not defined | CVE-2014-8494 |