ESTsoft ALUpdate 8.5.1.0.0 uses weak permissions (Users: Full Control) for the (1) AlUpdate folder and (2) AlUpdate.exe, which allows local users to gain privileges via a Trojan horse file.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Alupdate | Estsoft | 8.5.1.0.0 (including) | 8.5.1.0.0 (including) |