CVE-2014-9141

2014-12-0301:00:00

mitre

www.cve.org

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.3%

JSON

The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which allows local users to execute arbitrary code by modifying this program.

References

www.exploit-db.com/exploits/35423

www.information-paradox.net/2014/12/cve-2014-9141-thomson-reuters-fixed.html