PDF Complete Unquoted Service Path Vulnerability in pdfsvc.exe

A vulnerability exists in PDF Complete version 3.5.310.2002, specifically within the pdfsvc.exe service. The issue arises from an unquoted service path, which allows attackers to inject and execute malicious code with elevated LocalSystem privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution with LocalSystem privileges.

Reproduction

The vulnerability can be reproduced by exploiting the unquoted service path of the pdfsvc.exe service. This can be done by injecting a malicious payload into the service path, which is not properly quoted, allowing the payload to be executed with elevated privileges.