Security Advisory
CVE-2019-25273
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Easy-Hide-IP 5.0.0.3 contains an unquoted service path vulnerability in the EasyRedirect service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:Program FilesEasy-Hide-IPrdrEasyRedirect.exe to inject malicious executables and escalate privileges.