Description
Pingzapper 2.3.1 contains an unquoted service path vulnerability in the PingzapperSvc service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files (x86)\Pingzapper\PZService.exe' to inject malicious executables and escalate privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fyrolabs LLC. | Pingzapper | 2.3.1 | — |
References
- ExploitDB-49626 exploit
- Vendor Homepage product
- Software Download Page product
- VulnCheck Advisory: Pingzapper 2.3.1 - 'PingzapperSvc' Unquoted Service Path third-party-advisory