Samsung Magician Privilege Escalation Vulnerability via DLL Hijacking

A vulnerability exists in the Samsung Magician application, specifically in versions 6.3.0 through 8.3.2, for Windows. During installation, the Magician installer creates a temporary folder with inadequate permissions. This flaw allows non-administrative users to execute DLL hijacking, leading to unauthorized privilege escalation.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation by enabling DLL hijacking.