CVE-2018-18519 - BestXsoftware Best Free Keylogger before 6.0.0 allows local users to gain privileges via a Trojan horse "%PROGRAMFILES%\BFK 5.2.9\syscrb.exe" file because of insecure permissions for the BUILTIN\Users group

Back Back to CVE browser

HIGH

BestXsoftware Best Free Keylogger before 6.0.0 allows local users to gain privileges via a Trojan horse "%PROGRAMFILES%\BFK 5.2.9\syscrb.exe" file because of insecure permissions for the BUILTIN\Users group

Published Nov 19, 2018

7.8

HIGH

CVSS 3.0

EPSS 0.77%

Description

BestXsoftware Best Free Keylogger before 6.0.0 allows local users to gain privileges via a Trojan horse "%PROGRAMFILES%\BFK 5.2.9\syscrb.exe" file because of insecure permissions for the BUILTIN\Users group.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-426

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-10244
Advisory
https://github.com/ilsani/rd/tree/master/security-advisories/bestxsoftware/cve-2018-18519
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-10244		Advisory
https://github.com/ilsani/rd/tree/master/security-advisories/bestxsoftware/cve-2018-18519		x_refsource_MISCThird Party Advisory