Wondershare Dr.Fone Unquoted Service Path Vulnerability Allowing Arbitrary Code Execution

A vulnerability exists in Wondershare Dr.Fone version 12.0.18, where an unquoted service path allows local users to execute arbitrary code with elevated privileges. The misconfigured service path can be exploited to inject malicious code that executes with LocalSystem rights when the service starts.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of code with elevated system privileges, allowing local users to perform actions as the LocalSystem account.

Reproduction

The vulnerability can be reproduced by inserting code into the system root path, where it can remain undetected by the operating system or security applications. This code would then execute with the application's elevated privileges during startup or after a reboot.