Skip to content
Threat Feed
Subscribe

Vendor

Matrix42

1 brief RSS
high advisory

CVE-2016-20095: Matrix42 Remote Control Host Unquoted Service Path Privilege Escalation

A local attacker can exploit CVE-2016-20095, an unquoted service path vulnerability in Matrix42 Remote Control Host version 3.20.0031, to achieve arbitrary code execution with SYSTEM privileges by placing a malicious executable named 'Program.exe' in the 'C:\Program Files\' directory, leading to privilege escalation when the vulnerable service starts.

Matrix42 Remote Control Host 3.20.0031 privilege-escalation unquoted-service-path windows matrix42
2r 2t 1c