Privacyware Privatefirewall 7.0 - Unquoted Service Path Privilege Escalation

http://www.exploit-db.com/exploits/35322/

 

Affected version 7.0.30.3, that is also the latest.
I don't see any new version available to address the vulnerability.

 

That is interesting, I guess many other security softwares too have vulnerabilities.

I have managed succesfully EMETting TinyWall.exe.

I would not EMET Sandboxie processes or even AppGuard's, until some confirm being succesful. Nor Avast's processes.

 

Sorry to bump the thread, but any news regarding the issue? Is the exploit something to be worried about?

 

Vendor Status: Privacyware Privatefirewall 7.0.30.3
[09.11.2014] Vulnerability discovered.
[12.11.2014] Vendor contacted.
[20.11.2014] No response from the vendor.
[21.11.2014] Public security advisory released.

http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5209.php