WOW21 Unquoted Service Path Vulnerability Allowing Arbitrary Code Execution

A vulnerability exists in WOW21 version 5.0.1.9 due to an unquoted service path in the WOW21_Service. This flaw allows local attackers to execute arbitrary code with elevated privileges. Exploitation involves injecting malicious executables into the unquoted binary path, which are then executed with LocalSystem rights when the service starts.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of code with elevated system privileges, potentially allowing for significant changes to the system or application.

Reproduction

The vulnerability can be reproduced by injecting a malicious executable into the unquoted service path of the WOW21_Service. Once the executable is injected, it will be executed with LocalSystem privileges when the service is started.