Realtek Andrea RT Filters Unquoted Service Path Vulnerability Allowing Arbitrary Code Execution

A vulnerability exists in Realtek Andrea RT Filters version 1.0.64.7, where an unquoted service path in 'C:\Program Files\IDT\WDM\AESTSr64.exe' could allow local users to execute arbitrary code with elevated privileges. This exploitation could occur during service startup or system reboot.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of code with elevated system privileges.

Reproduction

The vulnerability can be reproduced by creating a malicious executable and placing it in a location that can be accessed during the service startup or system reboot. The unquoted service path allows the injected code to be executed with the application's privileges.