ProShow Producer Unquoted Service Path Vulnerability Allowing Arbitrary Code Execution

A vulnerability exists in ProShow Producer version 9.0.3797 within the ScsiAccess service, where an unquoted service path can be exploited by local attackers to execute arbitrary code. The flaw allows the injection of malicious executables that are executed with LocalSystem privileges when the service starts.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of arbitrary code with elevated privileges.

Reproduction

The vulnerability can be reproduced by exploiting the unquoted service path of the ScsiAccess service. This can be done by injecting a malicious executable into the path, which will be executed with LocalSystem privileges when the service is started.