Local privilege escalation via writable application executable

Insecure file permissions in Wondershare MobileGo 8.5.0 allow local users to gain administrative execution by replacing MobileGo.exe. The installer grants Everyone full control over executables in the application directory, so a low-privileged user can rename the legitimate binary and place a malicious replacement at the same path. Exploitation requires local access and execution by a more privileged user; the replacement then runs with that user's rights and can create an administrator account.