description: ALTOOLS update service 18.1 and earlier versions contains a local privilege escalation vulnerability due to insecure permission. An attacker can overwrite an executable that is launched as a service to exploit this vulnerability and execute arbitrary code with system privileges.
problem types: CWE-264 Permissions, Privileges, and Access Controls
affected:
{
product: ALTOOLS Update Service
vendor: ESTSOFT
versions:
status: affected, version: 18.1
}