Program Access Controller Unquoted Service Path Vulnerability in PACService.exe

A vulnerability exists in Program Access Controller version 1.2.0.0 within the PACService.exe file, where an unquoted service path allows local attackers to execute code with elevated privileges. This vulnerability can be exploited by injecting and running malicious executables with LocalSystem permissions during system startup or reboot.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution with elevated privileges.

Reproduction

The vulnerability can be reproduced by taking advantage of the unquoted service path of the PACService.exe. During system startup or reboot, the absence of quotes in the service path can be exploited to execute malicious executables with LocalSystem rights.