CVE-2020-27992

Dr.Fone 3.0.0 allows local users to gain privileges via a Trojan horse DriverInstall.exe because %PROGRAMFILESX86%\Wondershare\dr.fone\Library\DriverInstaller has Full Control for BUILTIN\Users...

CVE-2020-27992

CVE-2020-27992 concerns Wondershare Dr.Fone 3.0.0. The issue is a local privilege escalation where a Trojan horse can leverage the DriverInstall.exe in the DriverInstaller folder, which is reported to have Full Control for BUILTIN\Users. Several connected sources describe related indicators: an u...

Wondershare Dr.Fone 3.0.0 Unquoted Service Path Vulnerability

Exploit Title: Wondershare Dr.Fone DriverInstall.exe - "WsDrvInst" Unquoted Service Path Exploit Author: Andrea Intilangelo Vendor Homepage: https://www.wondershare.com Software Link: https://drfone.wondershare.com/ Version: 3.0.0 Tested on: Microsoft Windows 7sp2 x86/x64 CVE : CVE-2020-27992 -...