Description
Easy-Hide-IP 5.0.0.3 contains an unquoted service path vulnerability in the EasyRedirect service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Easy-Hide-IP\rdr\EasyRedirect.exe' to inject malicious executables and escalate privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Easy-Hide-Ip | IP | 5.0.0.3 | — |
References
- ExploitDB-47712 exploit
- Vendor Homepage product
- VulnCheck Advisory: Easy-Hide-IP 5.0.0.3 - 'EasyRedirect' Unquoted Service Path third-party-advisory