An issue was discovered in the installer in Samsung Magician 8.1.0 on Windows. An attacker can create arbitrary folders in the system permission directory via a symbolic link during the installation process.
During installation, installed file permissions are set to allow anyone to modify those files.
Link | Tags |
---|---|
https://semiconductor.samsung.com/support/quality-support/product-security-updates/ | vendor advisory |