Description
Oray PeanutHull 3.0.1.0 and earlier does not properly drop SYSTEM privileges when launched from the system tray, which allows local users to gain privileges by accessing the Help functionality.
References
- 16124 third-party-advisory
- 14330 vdb-entry
- http://secway.org/advisory/AD20050720EN.txt
- 20050720 PeanutHull Local Privilege Escalation Vulnerability mailing-list