CVE-2016-10072

WampServer 3.0.6 is affected by an arbitrary code execution vulnerability due to a weak Modify ACL on two files, wampmanager.exe and unins000.exe. A local, authorized but non-privileged user can replace these executable files, and when a more privileged user launches either program, malicious cod...