Vulnerabilities > Estsoft > Alupdate

DATE CVE VULNERABILITY TITLE RISK
2014-11-03 CVE-2014-8494 Permissions, Privileges, and Access Controls vulnerability in Estsoft Alupdate 8.5.1.0.0
ESTsoft ALUpdate 8.5.1.0.0 uses weak permissions (Users: Full Control) for the (1) AlUpdate folder and (2) AlUpdate.exe, which allows local users to gain privileges via a Trojan horse file.
local
low complexity
estsoft CWE-264
4.6