Description
Wondershare MobileGo 8.5.0 contains an insecure file permissions vulnerability that allows local users to modify executable files in the application directory. Attackers can replace the original MobileGo.exe with a malicious executable to create a new user account and add it to the Administrators group with full system access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Wondershare | MobileGo | 8.5.0 | — |
References
- ExploitDB-47667 exploit
- Wondershare Official Homepage product
- MobileGo Product Page product
- VulnCheck Advisory: MobileGo 8.5.0 - Insecure File Permissions third-party-advisory