Description
FULLBACK Manager Pro provided by GS Yuasa International Ltd. registers two Windows services with unquoted file paths. A user may execute arbitrary code with SYSTEM privilege if he/she has the write permission on the path to the directory where the affected product is installed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GS Yuasa International | FULLBACK Manager Pro (for Windows) | 4.00 and earlier | — |
| GS Yuasa International | FULLBACK Manager Pro for Network (for Windows) | 3.00 and earlier | — |