CVE-2014-2848

CVE-2014-2848 describes a local privilege-escalation flaw in Nessus 5.2.1, caused by a race condition in the wmi_malware_scan.nbin plugin before 201402262215. Attackers could replace the dissolvable agent executable in the Windows Temp directory with a Trojan horse to gain privileges. Connected s...