EIP-2026-117761
PRE-CVEPhotodex ProShow Gold/Producer 5.0.3310/6.0.3410 - 'ScsiAccess.exe' Local Privilege Escalation
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-117761. PoCs published by Julien Ahrens.
AI-analyzed exploit summary The advisory describes a local privilege escalation vulnerability in Photodex ProShow Producer due to insecure file permissions on 'scsiaccess.exe', allowing a low-privileged user to replace the executable and gain SYSTEM privileges. The proof-of-concept demonstrates the file permissions using 'icacls' but does not include functional exploit code.
Description
Photodex ProShow Gold/Producer 5.0.3310/6.0.3410 - 'ScsiAccess.exe' Local Privilege Escalation
Exploits (1)
The advisory describes a local privilege escalation vulnerability in Photodex ProShow Producer due to insecure file permissions on 'scsiaccess.exe', allowing a low-privileged user to replace the executable and gain SYSTEM privileges. The proof-of-concept demonstrates the file permissions using 'icacls' but does not include functional exploit code.