Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ESTsoft ALUpdate 8.5.1.0.0 uses weak permissions (Users: Full Control) for the (1) AlUpdate folder and (2) AlUpdate.exe, which allows local users to gain privileges via a Trojan horse file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ESTsoft ALUpdate 权限许可和访问控制漏洞
Vulnerability Description
ESTsoft ALUpdate是韩国ESTsoft公司的一套专用于PC的ALTools家族中的更新工具。 ESTsoft ALUpdate 8.5.1.0.0版本中存在安全漏洞，该漏洞源于程序为AlUpdate文件夹和AlUpdate.exe文件分配弱权限（Users: Full Control）。本地攻击者可借助Trojan horse文件利用该漏洞获取权限。
CVSS Information
N/A
Vulnerability Type
N/A