CVE-2014-8494

ESTsoft ALUpdate 8.5.1.0.0 grants full control to the Users group for the AlUpdate folder and AlUpdate.exe, enabling local privilege escalation via a Trojan horse file. This is a local-privilege escalation flaw stemming from weak permissions on the ALUpdate component, as documented by NVD and rel...