RealDefense SUPERAntiSpyware Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in RealDefense SUPERAntiSpyware. This issue arises from an exposed dangerous function within the SAS Core Service, allowing local attackers to escalate privileges and execute arbitrary code with SYSTEM rights. To exploit this vulnerability, an attacker must first have the ability to run low-privileged code on the affected system.

Impact

Exploitation of this vulnerability allows local attackers to escalate privileges and execute arbitrary code in the context of the SYSTEM user.

Remediation

Users can upgrade to SUPERAntiSpyware version 10.0.1280 to address this vulnerability.