Intercom MaLion Security Point Windows Incorrect Default Permissions Vulnerability Allowing Arbitrary Code Execution

A vulnerability exists in Security Point (Windows) of MaLion, prior to version 5.3.4, due to incorrect default permissions. This issue allows a user who can log into the system with the product's Windows client installed to place an arbitrary file in a specific folder. If the file is a specially crafted DLL, it could be executed with SYSTEM privileges.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution with SYSTEM privileges on the affected Windows system.

Remediation

Users are advised to update to Security Point (Windows) of MaLion version 5.3.4 or later. Instructions for downloading the latest version are available on the 'MaLion Club' website.