Description
sheed AntiVirus 2.3 contains an unquoted service path vulnerability in the ShavProt service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can insert a malicious executable in the unquoted path and trigger service restart or system reboot to execute code with LocalSystem privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Sheedantivirus | sheed AntiVirus | 2.3 | — |
References
- ExploitDB-40497 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: sheed AntiVirus 2.3 Unquoted Service Path Privilege Escalation third-party-advisory