CVE-2013-10046 Details

A local privilege escalation vulnerability has been identified in Agnitum Outpost Internet Security version 8.1. This vulnerability allows an unprivileged user to execute arbitrary code with SYSTEM privileges. The issue arises in the acs.exe component, which exposes a named pipe that accepts unauthenticated commands. Exploitation involves a directory traversal vulnerability in the pipe protocol, enabling an attacker to instruct the service to load a malicious DLL from a user-controlled location. The DLL is then executed in the context of the privileged service.