Realtek IIS Codec Service Unquoted Service Path Vulnerability Allowing Arbitrary Code Execution

A vulnerability exists in the Realtek IIS Codec Service version 6.4.10041.133 due to an unquoted service path. This flaw allows local attackers to potentially execute arbitrary code by exploiting the unquoted path in the service configuration. Attackers can inject malicious executables to escalate privileges on the system.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation and arbitrary code execution on the affected system.

Reproduction

The vulnerability can be reproduced by injecting a malicious executable into the unquoted service path of the Realtek IIS Codec Service. Once the executable is executed, it can be used to escalate privileges on the system.