Privilege Escalation via Help Functionality in Oray PeanutHull 3.0.1.0 and Earlier

Privilege Escalation via Help Functionality in Oray PeanutHull 3.0.1.0 and Earlier

CVE-2005-2382 · HIGH Severity

AV:L/AC:L/AU:N/C:C/I:C/A:C

Oray PeanutHull 3.0.1.0 and earlier does not properly drop SYSTEM privileges when launched from the system tray, which allows local users to gain privileges by accessing the Help functionality.

Learn more about our User Device Pen Test.