Description
IObit Uninstaller 9.5.0.15 contains an unquoted service path vulnerability in the IObitUnSvr service that allows local attackers to escalate privileges to SYSTEM level. Attackers can place a malicious executable named IObit.exe in the C:\Program Files (x86)\IObit directory and restart the service to execute code with SYSTEM privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Iobit | IObit Uninstaller | 9.5.0.15 | — |
References
- ExploitDB-48543 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: IObit Uninstaller 9.5.0.15 Unquoted Service Path Privilege Escalation third-party-advisory