high7.2Public exploit code
CVE-2014-9141
The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which allows local users to execute arbitrary co…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Thomson Reuters Fixed Assets CS 13.1.4 - Local Privilege Escalation2014-12-02 · local · windows
Impact
The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which allows local users to execute arbitrary code by modifying this program.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thomsonreuters | Fixed Assets Cs | through 13.1.4 |