Atomic Alarm Clock Unquoted Service Path Vulnerability Allowing Local Privilege Escalation

A local privilege escalation vulnerability has been identified in Atomic Alarm Clock version 6.3. The issue arises from an unquoted service path in the application's service configuration, allowing attackers to execute arbitrary code with SYSTEM privileges. By placing a malicious executable named 'Program.exe' in the root directory, an attacker can gain persistent system-level access.

Impact

Exploitation of this vulnerability allows for local privilege escalation, with executed code running under SYSTEM privileges.

Reproduction

The vulnerability can be reproduced by placing a file named 'Program.exe' in the root drive. The Atomic Alarm Clock service 'timeserv.exe' will then execute this file with SYSTEM privileges, allowing for unauthorized access to elevated rights.