Description
IObit Advanced SystemCare 10.0.2 contains an unquoted service path vulnerability in the AdvancedSystemCareService10 service that allows local attackers to escalate privileges. Attackers can place a malicious executable in the service path and trigger privilege escalation when the service restarts or the system reboots, executing code with LocalSystem privileges.
Problem types
Unquoted Search Path or Element
Product status
Credits
Ashiyane Digital Security Team
References
www.exploit-db.com/exploits/40577 (ExploitDB-40577)
www.iobit.com/en/index.php (Official Product Homepage)
www.iobit.com/en/advancedsystemcarefree.php (Product Reference)
www.vulncheck.com/...uoted-service-path-privilege-escalation (VulnCheck Advisory: IObit Advanced SystemCare 10.0.2 Unquoted Service Path Privilege Escalation)