CVE-2016-20059 | BDVDB-2026-324756 Detail

Description#

IObit Malware Fighter 4.3.1 contains an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services that allows local attackers to escalate privileges. Attackers can insert a malicious executable file in the unquoted service path and trigger privilege escalation when the service restarts or the system reboots, executing code with LocalSystem privileges.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-04-04Record published in the CVE List.
2. Version 22026-04-06Most recent update recorded in the CVE List.