vendor:
IObit Uninstaller
by:
Gobinathan L
7.2
CVSS
HIGH
Unquoted Service Path
835
CWE
Product Name: IObit Uninstaller
Affected Version From: 9.5.0.15
Affected Version To: 9.5.0.15
Patch Exists: NO
Related CWE: N/A
CPE: a:iobit:iobit_uninstaller
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Windows 10 64bit(EN)
2020
IObit Uninstaller 9.5.0.15 – ‘IObit Uninstaller Service’ Unquoted Service Path
When a service is created whose executable path contains spaces and isn't enclosed within quotes, leads to a vulnerability known as Unquoted Service Path which allows a user to gain SYSTEM privileges (only if the vulnerable service is running with SYSTEM privilege level which most of the time it is).
Mitigation:
Enclose the service path within quotes.