Full title: Samsung SW Update Service Privilege Escalation Vulnerability 
Category: web applications
Platform: windows
Samsung Software Update Service, SWUpdateService (SWMAgent.exe), installs as a service with an unquoted service path running with SYSTEM privileges. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system.

# 0day.today @ http://0day.today/