Hola VPN Elevation of Privilege Vulnerability

Hola VPN is a VPN software that supports anonymous web browsing. An elevation of privilege vulnerability exists in Hola VPN version 1.34. A local attacker can exploit this vulnerability to gain privileges with the help of a malicious 7za.exe or hola.exe file...

Design/Logic Flaw

Hola VPN 1.34 has weak permissions Everyone:F under %PROGRAMFILES%, which allows local users to gain privileges via a Trojan horse 7za.exe or hola.exe file...

CVE-2017-16757

Hola VPN 1.34 has weak permissions Everyone:F under %PROGRAMFILES%, which allows local users to gain privileges via a Trojan horse 7za.exe or hola.exe file...

CVE-2017-16757

Hola VPN 1.34 is affected by a local privilege escalation due to weak permissions (Everyone:F) in %PROGRAMFILES%, enabling a local attacker to gain privileges via a malicious 7za.exe or hola.exe file. The CVE entry provides no exploit details in the connected documents; no remediation details are...