Description
Atomic Alarm Clock 6.3 contains a local privilege escalation vulnerability in its service configuration that allows attackers to execute arbitrary code with SYSTEM privileges. Attackers can exploit the unquoted service path by placing a malicious executable named 'Program.exe' to gain persistent system-level access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Drive-Software | Atomic Alarm Clock x86 | 6.3 | — |
References
- ExploitDB-48352 exploit
- Vendor Homepage product
- VulnCheck Advisory: Atomic Alarm Clock x86 6.3 - 'AtomicAlarmClock' Unquoted Service Path third-party-advisory