CVE-2016-20059— IObit Malware Fighter 4.3.1 Unquoted Service Path Privilege Escalation

IObit Malware Fighter 4.3.1 Unquoted Service Path Privilege Escalation

IObit Malware Fighter 4.3.1 contains an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services that allows local attackers to escalate privileges. Attackers can insert a malicious executable file in the unquoted service path and trigger privilege escalation when the service restarts or the system reboots, executing code with LocalSystem privileges.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

未经引用的搜索路径或元素

IOBit Malware Fighter 代码问题漏洞

IOBit Malware Fighter是IOBit公司的一套基于Windows平台的杀毒软件。该软件具有反恶意软件和病毒防护等功能。 IObit Malware Fighter 4.3.1版本存在代码问题漏洞，该漏洞源于IMFservice和LiveUpdateSvc服务存在未加引号的服务路径，可能导致本地攻击者通过在未加引号的服务路径中插入恶意可执行文件实现权限提升。

N/A

N/A