Back to feed
EUVD-2012-0340 · Published Jun 22, 2012
Symantec LiveUpdate Administrator before 2.3.1 uses weak permissions (Everyone: Full Control) for the installation directory, which allows local users to gain privileges via a Trojan horse file.
Technologies
Symantec Liveupdate Administrator
Weaknesses
CWE-264
CVSS scores
- v2.06.9
AV:L/AC:M/Au:N/C:C/I:C/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Privilege Escalation
References
Potentially impacted assets
See if this affects your attack surface
