PDF Complete Corporate Edition Unquoted Service Path Vulnerability in pdfcDispatcher Service Allowing Arbitrary Code Execution

A vulnerability exists in PDF Complete Corporate Edition version 4.1.45 due to an unquoted service path in the pdfcDispatcher service. This flaw allows local attackers to execute arbitrary code by injecting malicious executables into the service's binary location. The injected code would be executed with elevated LocalSystem privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of arbitrary code with LocalSystem privileges.

Reproduction

The vulnerability can be reproduced by exploiting the unquoted service path of the pdfcDispatcher service. This can be done by injecting a malicious executable into the service's binary location. The executable will be executed with LocalSystem privileges, allowing for elevated access on the system.