CVE-2016-20059: IObit Malware Fighter 4.3.1 Unquoted Service Path Privilege Escalation
IObit Malware Fighter 4.3.1 contains an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services that allows local attackers to escalate privileges. Attackers can insert a malicious executable file in the unquoted service path and trigger privilege escalation when the service restarts or the system reboots, executing code with LocalSystem privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IObit Malware Fighterto a version that resolves this vulnerability.Fixed in 4.3.1 - Compensating control
Mitigate the unquoted service path privilege escalation by securing the IMFservice and LiveUpdateSvc service binary paths so that the executable path is quoted/fully qualified and not writable by local attackers (prevent path searching/execution).
Event History
Frequently Asked Questions
What is the severity of CVE-2016-20059?
The severity of CVE-2016-20059 is rated high with a score of 8.5.
How does CVE-2016-20059 affect IObit Malware Fighter 4.3.1?
CVE-2016-20059 allows local attackers to escalate privileges through an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services.
What can an attacker do with CVE-2016-20059?
An attacker can insert a malicious executable file in the unquoted service path to trigger privilege escalation when the service is started.
What versions of IObit Malware Fighter are affected by CVE-2016-20059?
CVE-2016-20059 affects IObit Malware Fighter version 4.3.1.
How can I mitigate the risk from CVE-2016-20059?
To mitigate the risk from CVE-2016-20059, ensure that service paths are properly quoted and apply security patches provided by IObit.