Exploitation Summary
EIP tracks 1 public exploit for CVE-2019-25344. PoCs published by ZwX.
AI-analyzed exploit summary This exploit leverages insecure file permissions in Wondershare MobileGo 8.5.0, allowing an attacker to replace the executable with a malicious version to escalate privileges. The PoC demonstrates how to compile and replace the executable to execute arbitrary commands with higher privileges.
Description
Wondershare MobileGo 8.5.0 contains an insecure file permissions vulnerability that allows local users to modify executable files in the application directory. Attackers can replace the original MobileGo.exe with a malicious executable to create a new user account and add it to the Administrators group with full system access.
Exploits (1)
This exploit leverages insecure file permissions in Wondershare MobileGo 8.5.0, allowing an attacker to replace the executable with a malicious version to escalate privileges. The PoC demonstrates how to compile and replace the executable to execute arbitrary commands with higher privileges.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H