Threats tagged 'ghsa-6wg9-8g76-mrm8'

A local privilege escalation vulnerability exists in SmartUpdate.exe and SmartExecute.exe components of INFINITT Healthcare Co., Ltd.'s INFINITT PACS. A low-privileged local attacker can modify a world-writable command manifest file named execlist.txt, which is processed during application updates, to execute arbitrary commands with administrator privileges.