An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. If a malicious user gains access to the product, arbitrary code could be executed with SYSTEM privileges.
Exposed IOCTL with Insufficient Access Control The product implements an IOCTL with functionality that should be restricted, but it does not properly enforce access control for the IOCTL.