VeePN Unquoted Search Path Vulnerability in AVService Component Allowing Local Privilege Escalation

A vulnerability exists in VeePN versions through 1.6.2, specifically in the AVService component. The issue arises from an unquoted search path in the service's executable file, located at 'C:\Program Files (x86)\VeePN\avservice\avservice.exe'. This flaw creates an unquoted search path vulnerability, allowing local attackers with file-write access to place a malicious binary in a writable directory. When the service is restarted, the malicious binary can be executed with elevated privileges, typically those of the SYSTEM account, leading to local privilege escalation and potential full system compromise.

Impact

Exploitation of this vulnerability allows for local privilege escalation to the service account, which commonly has SYSTEM privileges, potentially leading to a complete compromise of the system.