Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2016-20060

Hotspot Shield 6.0.3 Unquoted Service Path Privilege Escalation

Description

Hotspot Shield 6.0.3 contains an unquoted service path vulnerability in the hshld service binary that allows local attackers to escalate privileges by injecting malicious executables. Attackers can place executable files in the service path and upon service restart or system reboot, the malicious code executes with LocalSystem privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hotspotshield Hotspot Shield

  • 6.0.3affected

References