Description
IObit Malware Fighter 4.3.1 contains an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services that allows local attackers to escalate privileges. Attackers can insert a malicious executable file in the unquoted service path and trigger privilege escalation when the service restarts or the system reboots, executing code with LocalSystem privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Iobit | IObit Malware Fighter | 4.3.1 | — |
References
- ExploitDB-40525 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: IObit Malware Fighter 4.3.1 Unquoted Service Path Privilege Escalation third-party-advisory