An Unquoted Service Path vulnerability exists in System Explorer 7.0.0 via via a specially crafted file in the SystemExplorerHelpService service executable path.
The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.
Link | Tags |
---|---|
https://github.com/M507/Miner | third party advisory exploit |
https://www.exploit-db.com/exploits/49248 | third party advisory vdb entry exploit |
https://exchange.xforce.ibmcloud.com/vulnerabilities/193324 | third party advisory vdb entry |