Description
Magic Mouse 2 Utilities 2.20 contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path to inject malicious executables and gain elevated system privileges by placing a malicious file in the service path.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Magic Utilities | Magic Mouse 2 utilities | 2.20 | — |
References
- ExploitDB-49017 exploit
- Magic Utilities Vendor Homepage product
- VulnCheck Advisory: Magic Mouse 2 utilities 2.20 - 'magicmouse2service' Unquoted Service Path third-party-advisory