Description (CNA)
Popcorn Time 6.2.1.14 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can insert malicious executables in Program Files (x86) or system root directories to be executed with SYSTEM-level permissions during service startup.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Getpopcorntime / Popcorn Time | affected 6.2.1.14 |
CWE
CWE-428
References
- https://www.exploit-db.com/exploits/48378
- https://getpopcorntime.is
- https://www.vulncheck.com/advisories/popcorn-time-update-service-unquoted-service-path
ADP enrichment
No English description supplied.
No references supplied.