CVE-2014-8494

CVE-2014-8494 describes a local privilege escalation vulnerability in ESTsoft ALUpdate 8.5.1.0.0. The software incorrectly assigns weak permissions (Full Control to Users) to its installation folder and executable, AlUpdate.exe. This allows a local attacker to replace the legitimate executable with a malicious Trojan horse, leading to privilege escalation. With a CVSS score of 4.6, this vulnerability has a low attack complexity and requires local access, but could result in compromise of confidentiality, integrity, and availability. There is no known active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.