Prey Unquoted Service Path Vulnerability in CronService Allowing Privilege Escalation

A vulnerability exists in Prey version 1.9.6 due to an unquoted service path in the CronService. This flaw allows local users to execute code with elevated privileges. Exploitation involves inserting malicious code into a location that the operating system does not monitor, which could then be executed when the application starts or the system reboots.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution with elevated privileges.

Reproduction

The vulnerability can be reproduced by creating a service with an unquoted path that includes spaces. This can be done by manually editing the service configuration to remove the quotes around the path. Once the service is started, the injected code can be executed with elevated privileges.