Arbitrary file deletion via uninstaller junction points

Insecure Windows junction handling in AMD uProf before 5.0 allows local users to delete or disclose arbitrary files during uninstallation. The Windows uninstaller follows attacker-created junction points when removing files instead of constraining deletion to the product directory. A low-privileged local user must plant a junction and wait for another user to launch the uninstaller, exposing or deleting files reachable under that user's rights.