Description
Arcsoft PhotoStudio 6.0.0.172 contains an unquoted service path vulnerability in the ArcSoft Exchange Service that allows local attackers to escalate privileges. Attackers can place a malicious executable in the unquoted path and trigger the service to execute arbitrary code with system-level permissions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Arcsoft | PhotoStudio | ≤ 6.0.0.172 | — |
References
- ExploitDB-51393 exploit
- Official Product Homepage product
- VulnCheck Advisory: Arcsoft PhotoStudio 6.0.0.172 Unquoted Service Path Privilege Escalation third-party-advisory