Uncontrolled search path element vulnerability in Samsung Update prior to version 3.0.77.0 allows malicious users to execute arbitrary code as Samsung Update permission.
samsung update