CVE-2018-5349

CVE-2018-5349 affects Heimdal PRO v2.2.190 (likely also Heimdal FREE/CORP). The flaw is improper permissions on C:\ProgramData\Heimdal Security\Heimdal Agent, allowing BUILTIN\Users to write files in that directory. On startup, Heimdal.MonitorServices.exe (running as SYSTEM) loads version.dll fro...