Description (CNA)
Wondershare Driver Install Service contains an unquoted service path vulnerability in the ElevationService executable that allows local attackers to potentially inject malicious code. Attackers can exploit the unquoted path to replace the service binary with a malicious executable, enabling privilege escalation to LocalSystem account.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Wondershare / Wondershare Driver Install Service help | affected 10.7.1.321 |
CWE
CWE-428
References
- https://www.exploit-db.com/exploits/49101
- https://www.wondershare.com/
- https://www.wondershare.com/drfone/
- https://www.vulncheck.com/advisories/wondershare-driver-install-service-help-elevationservice-unquote-service-path
ADP enrichment
No English description supplied.