Threats tagged 'ghsa-45pg-vr27-cp42'

Progressive Robot hMailServer 6.3.7 on Windows has incorrect default permissions in its installer when installing into pre-existing folders writable by non-administrators. This flaw allows a local authenticated user to execute code with administrator privileges during setup or upgrade by placing malicious libraries in the Bin folder before permissions are hardened. The default installation under Program Files is not affected.