Description
SANUPS SOFTWARE provided by SANYO DENKI CO., LTD. registers Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SANYO DENKI | SANUPS SOFTWARE STANDALONE | Ver.1.0.1 to Ver.1.1.4 | — |
| SANYO DENKI | SANUPS SOFTWARE | Ver.2.0.0 to Ver.2.0.2, Ver.1.0.0 to Ver.1.1.4 | — |