CVE-2014-2848

CVE-2014-2848 describes a race condition in the wmi_malware_scan.nbin plugin for Nessus 5.2.1, allowing local users to achieve privilege escalation. An attacker could replace the dissolvable agent executable in the Windows temporary directory with a malicious program during a specific time window. This vulnerability has a CVSS score of 6.9, indicating high severity due to complete confidentiality, integrity, and availability impacts, though it requires medium attack complexity and local access. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.