CVE-2014-8494: Undefined Security Weakness

ESTsoft ALUpdate 8.5.1.0.0 uses weak permissions Users: Full Control for the 1 AlUpdate folder and 2 AlUpdate.exe, which allows local users to gain privileges via a Trojan horse file...