Wondershare Driver Install Service Unquoted Service Path Vulnerability Allowing Privilege Escalation

A vulnerability exists in the Wondershare Driver Install Service, specifically in version 10.7.1.321, due to an unquoted service path in the ElevationService executable. This flaw allows local attackers to inject malicious code by replacing the service binary with a harmful executable, potentially leading to unauthorized privilege escalation to the LocalSystem account.

Impact

Exploitation of this vulnerability could allow local attackers to gain elevated privileges, executing code with LocalSystem rights.

Reproduction

The vulnerability can be reproduced by replacing the service binary of the ElevationService with a malicious executable. Once the unquoted service path is exploited, the service can be started, executing the injected malicious code with elevated privileges.