Description
Mikogo 5.2.2.150317 contains an unquoted service path vulnerability in the Mikogo-Service Windows service configuration. Attackers can exploit the unquoted path to inject and execute malicious code with LocalSystem privileges by placing executable files in specific path locations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| LiteManager Team | Mikogo | 5.2.2.150317 | — |
References
- ExploitDB-47510 exploit
- Mikogo Software Download Page product
- VulnCheck Advisory: Mikogo 5.2.2.150317 - 'Mikogo-Service' Unquoted Service Path third-party-advisory