Microvirt MEMU Play Unquoted Service Path Vulnerability in MEmusvc Windows Service

A vulnerability exists in Microvirt MEMU Play version 3.7.0, specifically within the MEmusvc Windows service. This vulnerability is an unquoted service path issue that allows local attackers to execute arbitrary code. Exploitation involves injecting malicious executables into the unquoted binary path, which are then executed with elevated LocalSystem privileges.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution with LocalSystem privileges.

Reproduction

The vulnerability can be reproduced by injecting a malicious executable into the unquoted service path of the MEmusvc Windows service. Once the executable is injected, it will be executed with elevated LocalSystem privileges, allowing for potential exploitation of the vulnerability.