CVE-2014-5507

CVE-2014-5507 describes a local privilege escalation vulnerability in iBackup versions 10.0.0.32 and earlier. The flaw stems from weak permissions on the ib_service.exe file, granting "Everyone" full control, which allows a local attacker to replace the legitimate executable with a malicious one. This vulnerability carries a CVSS score of 7.2, indicating high severity due to its low attack complexity and complete impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit (EDB-35040) is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.