ShareMouse Unquoted Service Path Vulnerability Allowing Arbitrary Code Execution

A vulnerability exists in ShareMouse version 5.0.43 due to an unquoted service path in the ShareMouse Service. This flaw allows local users to execute arbitrary code with elevated privileges. Exploitation involves placing malicious executables in specific system directories, where they can be executed during the service startup.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of code with elevated system privileges.

Reproduction

The vulnerability can be reproduced by placing a malicious executable in a directory that the ShareMouse Service will access during startup. Once the executable is in place, it can be executed with the same elevated privileges as the ShareMouse application.