Code injection

2020-06-1613:15:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

I2P before 0.9.46 allows local users to gain privileges via a Trojan horse I2PSvc.exe file because of weak permissions on a certain %PROGRAMFILES% subdirectory.

CPENameOperatorVersion
i2plt0.9.46

CPE	Name	Operator	Version
	i2p	lt	0.9.46

References

blog.blazeinfosec.com/security-advisory-i2p-for-windows-local-privilege-escalation/

geti2p.net/en