CVE-2014-8419

CVE-2014-8419 describes a privilege escalation vulnerability in Wibu-Systems CodeMeter Runtime versions prior to 5.20. The flaw stems from weak permissions on the codemeter.exe executable, allowing all local users read and write access. This enables a local attacker to gain elevated privileges by replacing the legitimate executable with a malicious Trojan horse file, leading to complete compromise of confidentiality, integrity, and availability. Despite its high CVSS score of 7.2, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.