Local Privilege Escalation in Symantec LiveUpdate Administrator

CVE-2012-0304

What is CVE-2012-0304?

Symantec LiveUpdate Administrator prior to version 2.3.1 is susceptible to a local privilege escalation vulnerability resulting from improper permissions assigned to the installation directory. This flaw permits users with local access to install unauthorized files, potentially escalating their privileges by executing a Trojan horse file. Organizations utilizing affected versions should take immediate steps to update their installation to safeguard against potential exploitation.

References