CVE-2016-20059 PUBLISHED

IObit Malware Fighter 4.3.1 contains an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services that allows local attackers to escalate privileges. Attackers can insert a malicious executable file in the unquoted service path and trigger privilege escalation when the service restarts or the system reboots, executing code with LocalSystem privileges.

• Amir.ght finder

• ExploitDB-40525
• Official Product Homepage
• Product Reference
• VulnCheck Advisory: IObit Malware Fighter 4.3.1 Unquoted Service Path Privilege Escalation

• Unquoted Search Path or Element CWE